/hvaonline/posts/list/31.html JForum - http://www.jforum.net Dear Sir or Madam, we realized, that one of your servers or clients is constantly trying to harvest email addresses from our mailserver by trying to deliver email to any possible email address. It is likely, that the server, you are responsible for, is beeing misused or hacked or that the dialin computer from your customer is infiltrated and misused for email harvesting. Or your services are replying to spam you receive and the faked sender address belongs to us. Your systems should then check our SPF-records to proof, that this spam was not originating from our mailservers and prevent socalled backscattering. Please stop the following IP from scanning our server or prevent your systems from backscattering. --- excerpt from our logfiles --- Timestamps are: German localtime, GMT+1 MET Jan 24 09:47:27 powerweb sendmail[14055]: STARTTLS=server, relay=mx8605.superdata.vn [112.213.86.5] (may be forged), version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 Jan 24 10:08:04 powerweb sendmail[15012]: STARTTLS=server, relay=mx8605.superdata.vn [112.213.86.5] (may be forged), version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 Jan 24 10:31:49 powerweb sendmail[15831]: STARTTLS=server, relay=mx8605.superdata.vn [112.213.86.5] (may be forged), version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 Jan 24 10:43:27 powerweb sendmail[16263]: STARTTLS=server, relay=mx8605.superdata.vn [112.213.86.5] (may be forged), version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 Jan 24 10:54:51 powerweb sendmail[16639]: STARTTLS=server, relay=mx8605.superdata.vn [112.213.86.5] (may be forged), version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 Jan 24 11:07:53 powerweb sendmail[17310]: STARTTLS=server, relay=mx8605.superdata.vn [112.213.86.5] (may be forged), version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 Jan 24 13:15:58 powerweb sendmail[22751]: STARTTLS=server, relay=mx8605.superdata.vn [112.213.86.5] (may be forged), version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 Jan 24 15:08:33 powerweb sendmail[28102]: STARTTLS=server, relay=mx8605.superdata.vn [112.213.86.5] (may be forged), version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 Jan 24 15:09:07 powerweb sendmail[28178]: STARTTLS=server, relay=mx8605.superdata.vn [112.213.86.5] (may be forged), version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 Jan 24 15:10:23 powerweb sendmail[28319]: STARTTLS=server, relay=mx8605.superdata.vn [112.213.86.5] (may be forged), version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 Jan 24 15:15:59 powerweb sendmail[28761]: STARTTLS=server, relay=mx8605.superdata.vn [112.213.86.5] (may be forged), version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 Jan 24 15:27:35 powerweb sendmail[29523]: STARTTLS=server, relay=mx8605.superdata.vn [112.213.86.5] (may be forged), version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 Jan 24 15:27:40 powerweb sendmail[29522]: STARTTLS=server, relay=mx8605.superdata.vn [112.213.86.5] (may be forged), version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 Jan 24 15:37:27 powerweb sendmail[29937]: STARTTLS=server, relay=mx8605.superdata.vn [112.213.86.5] (may be forged), version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256   Mình cũng ko phải chuyên it, vì biết tí máy móc nên làm quản trị mạng luôn. Mình down code về quét virus thì ko thấy có. Xin mọi người bắt bệnh và giúp cách giải quyết. Xin cảm ơn.]]> /hvaonline/posts/list/44727.html#275693 /hvaonline/posts/list/44727.html#275693 GMT /hvaonline/posts/list/44727.html#275857 /hvaonline/posts/list/44727.html#275857 GMT