找回密码
 立即注册
搜索
热搜: 活动 交友 discuz
查看: 64|回复: 10

收到cloudcone说我vps滥用的邮件,这是什么情况啊

[复制链接]

14

主题

447

回帖

942

积分

高级会员

积分
942
发表于 2018-2-6 22:58:49 | 显示全部楼层 |阅读模式
懂的大佬给看下,我只看到SMTP,被用来发邮件了?

Abuse Report for 小鸡IP

Original complaint:

From 6780972609.d94104ef@bounces.spamcop.net Tue Feb 6 08:14:46 2018
Received: from vmx.spamcop.net (vmx.spamcop.net [184.94.240.112])
by home2.multacom.com (8.13.6/8.13.6) with ESMTP id w168EkwK015271
for ; Tue, 6 Feb 2018 08:14:46 GMT
(envelope-from 6780972609.d94104ef@bounces.spamcop.net)
Received: from prod-sc-www02.sv4.ironport.com (HELO prod-sc-www02.spamcop.net) ([10.8.129.226])
by prod-sc-smtp-vip.sv4.ironport.com with SMTP; 06 Feb 2018 00:34:09 -0800
Received: from [81.115.48.178] by spamcop.net
with HTTP; Tue, 06 Feb 2018 08:34:09 GMT
From: "Martino.Mori"
To: abuse@multacom.com
Subject: [SpamCop (小鸡IP) id:6780972609][deltanovel2] IMG_SWIFT_INVOICE PAYMENT
Precedence: list
Message-ID:
Date: Tue, 06 Feb 2018 01:32:49 +0100
X-SpamCop-sourceip: 小鸡IP
X-Mailer: https://www.spamcop.net/ v4.8.7

[ SpamCop V4.8.7 ]
This message is brief for your comfort. Please use links below for details.

Email from 小鸡IP / Tue, 06 Feb 2018 01:32:49 +0100
https://www.spamcop.net/w3m?i=z6780972609zd94104ef1777135813ae449c142023cez

[ Offending message ]
Received: from mail.beteas.cf ([小鸡IP])
by mx.deltanovel.com (mx.deltanovel.com)
(MDaemon PRO v12.0.1)
with ESMTP id 52-pd50000093045.msg;
Tue, 06 Feb 2018 01:32:49 +0100
Reply-To:
From: "HSBC PAYMENT DESK"
To: "x"
Subject: [deltanovel2] IMG_SWIFT_INVOICE PAYMENT
Date: Mon, 5 Feb 2018 23:34:05 +0100
Message-ID:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_00A8_01D39F28.CA99ED70"
X-Mailer: Microsoft Outlook 16.0
X-Antivirus: AVG for E-mail 2016.0.8039 [4793/15375]
X-AVG-ID: ID2314AB4C-7F7DB51
X-AVG-Antispam-Info: 30,2,0,5dbbf137e226567a,d41d8cd98f00b204,x,        x, RULES_HIT:41:72:355:379:560:904:962:967:969:973:983:988:989:1077:1189:1208:1260:1263:1313:1314:1345:1381:1431:1436:1437:1516:1517:1518:1534:1540:1575:1588:1589:1592:1594:1711:1714:1730:1764:1777:1792:2525:2560:2563:2682:2685:2693:2829:2859:2890:2893:2933:2937:2939:2942:2945:2947:2951:2954:3022:3038:3138:3139:3140:3141:3142:3351:3740:3865:3867:3868:3870:3871:3873:3934:3936:3938:3941:3944:3947:3950:3953:3956:3959:4042:4321:4649:5007:6261:6678:6684:6687:7809:7903:8906:8971:9025:9388:9469:9979:10010:10049:10215:10394:11658:11850:12043:12050:12051:12217:12219:12324:12354:12555:12561:12679:12740:12895:12986:13439:14036:14037:14096:14181:14516:14633:14721:14828:21080:21433:21450:21451:21524:21627:21659:30001:30007:30023:30026:30038:30039:30054:30055:30064:30070:30074:30075:30079,        0,RBL:none,CacheIP:none,Bayesian:0.5,0.5,0.5,Netcheck:none,DomainCache:0, MSF:not bulk,SPF:,MSBL:0,DNSBL:none,Custom_rules:0:2:0,LFtime:0,
LU
A_SUMMARY:none
Thread-Index: AQGOLACiFFEZu5zvqJRpSKQbjwGitQ==
X-Spam-Processed: mx.deltanovel.com, Tue, 06 Feb 2018 01:32:50 +0100
X-MDRemoteIP: 小鸡IP
X-MDaemon-Deliver-To: deltanovel2@deltanovel.com

This is a multipart message in MIME format.

------=_NextPart_000_00A8_01D39F28.CA99ED70
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

Dear Sir/Madam,

Attached out going Swift copy is your invoice payment which your customer
instructed we process for you,The payment proccedings will be completed by
tommrow morning,we just need you to check to make sure all bank details/
informations are correct to avoid sending payment to wrong account.

Note : Payment should be in your account in less than 48 hours after
completed.So your urgent attention is needed to check the details and revert
back to us.

Stuart Gulliver (PAYMENT DESK CHAIRMAN)

Head Office: 8 Canada Square, London E14 5HQ, United Kingdom

Phone +44-20-79918888

Fax +44-20-79924880

Website www.hsbc.com ;

------=_NextPart_000_00A8_01D39F28.CA99ED70
Content-Type: text/html;
boundary="----=_NextPart_000_003E_01D39F28.9D461380";
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

[B]Dear Sir/Madam,

Attached out going Swift copy is your invoice payment which your =
customer instructed we process for you,The payment proccedings  =
will be completed by tommrow morning,we just need you to check to make =
sure all bank details/ informations are correct to avoid sending payment =
to wrong account.

Note : Payment should be in your account in less than 48 hours after =
completed.So your urgent attention is needed to check the details and =
revert back to us.

Stuart Gulliver (PAYMENT DESK CHAIRMAN)

Head Office: =
8 Canada Square, London E14 5HQ, United Kingdom

Phone +44-20-79918888

Fax +44-20-79924880

Website www.hsbc.com
[/B]
------=_NextPart_000_00A8_01D39F28.CA99ED70--

--

CloudBot from CloudCone.
回复

使用道具 举报

14

主题

447

回帖

942

积分

高级会员

积分
942
 楼主| 发表于 2018-2-6 23:00:07 | 显示全部楼层
好可怕,小鸡上只有酸酸和探针,ssh端口也改了,目前已经重装
回复

使用道具 举报

23

主题

1397

回帖

2873

积分

金牌会员

积分
2873
发表于 2018-2-6 23:00:54 | 显示全部楼层
一大坨,机翻都看不懂
回复

使用道具 举报

14

主题

447

回帖

942

积分

高级会员

积分
942
 楼主| 发表于 2018-2-6 23:03:12 | 显示全部楼层
酸酸是teddysun的一键脚本装的,bbr是Vicer大佬的,lnmp.org的探针,跑过superbench.sh,其他应该都没用过,这机是备用酸酸,一般吃灰的
回复

使用道具 举报

14

主题

447

回帖

942

积分

高级会员

积分
942
 楼主| 发表于 2018-2-6 23:07:05 | 显示全部楼层

ALPP 发表于 2018-2-6 23:00

一大坨,机翻都看不懂

就看到什么SMTP,x-mailer之类的,应该是说发邮件吧
回复

使用道具 举报

88

主题

1029

回帖

2350

积分

金牌会员

积分
2350
发表于 2018-2-6 23:00:00 | 显示全部楼层
你的lnmp没配置好吧
回复

使用道具 举报

14

主题

447

回帖

942

积分

高级会员

积分
942
 楼主| 发表于 2018-2-6 23:11:14 | 显示全部楼层
我是小白,重装之前的top也看不懂有什么异常进程,这是被入侵了?都改了ssh端口,root密码也不简单










本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有账号?立即注册

×
回复

使用道具 举报

4

主题

152

回帖

324

积分

中级会员

积分
324
发表于 2018-2-6 23:12:37 | 显示全部楼层
你把邮件正文发出来就好了,为什么还要加其他没必要的信息
回复

使用道具 举报

14

主题

447

回帖

942

积分

高级会员

积分
942
 楼主| 发表于 2018-2-6 23:16:44 | 显示全部楼层
"

我不懂呀,我就把cloudcone发的邮件全部内容都贴在1楼了
回复

使用道具 举报

14

主题

447

回帖

942

积分

高级会员

积分
942
 楼主| 发表于 2018-2-6 23:25:17 | 显示全部楼层

fengshu 发表于 2018-2-6 23:25

我不懂呀,我就把cloudcone发的邮件全部内容都贴在1楼了

其他那些都是邮箱的基本格式,subject相当于邮箱的主题
Subject: [SpamCop (小鸡IP) id:6780972609][deltanovel2] IMG_SWIFT_INVOICE PAYMENT
yd1044738303 发表于 2018-2-6 23:34

其他那些都是邮箱的基本格式,subject相当于邮箱的主题
Subject: [SpamCop (小鸡IP) id:6780972609][delt ...

多谢大佬指点
回复

使用道具 举报

您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

Archiver|手机版|小黑屋|Discuz! X

GMT+8, 2025-2-22 02:26 , Processed in 0.022503 second(s), 3 queries , Gzip On, Redis On.

Powered by Discuz! X3.5

© 2001-2024 Discuz! Team.

快速回复 返回顶部 返回列表