如何停止如下"洗版",被攻擊好幾個小時了

[october]

如何停止如下"洗版",被攻擊好幾個小時了


[2006/6/28 下午 04:24:34] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:35] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:36] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:37] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:39] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:40] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:42] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:43] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:45] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:48] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:49] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:51] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:52] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:53] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:55] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:57] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:24:59] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:01] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:03] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:05] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:06] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:07] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:09] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:10] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:12] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:14] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:15] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:16] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:18] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:19] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:20] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:20] [4032] SMTP 服務接受從 220.184.179.188 來的連線
[2006/6/28 下午 04:25:21] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:22] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:23] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:24] [4032] SMTP 服務拒絕從 220.184.179.188 來的連線, 因為 [SORBS] Your ip (220.184.179.188) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=220.184.179.188 for more details.
[2006/6/28 下午 04:25:24] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:24] [4032] SMTP 服務中斷從 220.184.179.188 來的連線
[2006/6/28 下午 04:25:25] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:26] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:27] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:28] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:29] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:30] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:31] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:32] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:33] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:34] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
[2006/6/28 下午 04:25:35] SMTP 服務停止啟動於埠號 25
[2006/6/28 下午 04:25:35] POP3 服務停止啟動於埠號 110
[2006/6/28 下午 04:25:35] [2468] SMTP 服務拒絕從 84.155.255.5 來的連線, 因為 [SORBS] Your ip (84.155.255.5) is Dynamic IP address, use your ISP SMTP Server instead. Please visit http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=84.155.255.5 for more details.
_________________
我們用心灌溉這個園地,讓他更茁壯

[timothy_wu]

應該是垃圾信的新攻擊法

我公司從昨天凌晨開始已被轟炸兩天了
已封鎖30個以上的IP了....現在還在轟
LOG檔從每天300K左右 暴增到20M以上

如果你有空陪它玩......只有見一個IP鎖一個IP

好像撐個幾天 不要被攻破 就會放棄了.....聽說的

[october]

我剛剛查IP WHOIS 84.0.0.0到84.255.255.255的IP
全部是阿姆斯特丹,我把它全封鎖了
_________________
我們用心灌溉這個園地,讓他更茁壯

[Liang]

如果可以的話建議
阻擋過濾的部份交給防火牆去做吧
MailD盡量單純做郵件伺服器工作
這樣會比較好

[october]

防火牆擋SMTP PORT會不會有問題阿
_________________
我們用心灌溉這個園地,讓他更茁壯

[io_oi]

我前幾天，約連續三天左右，也是類似被這樣攻擊
光這個LOG每天就約十幾二十mb
昨天停止了，除了郵件被攻擊外，連DNS也掛點，真是夠慘滴
還好目前無恙了

[october]

剛剛又發現持續攻擊的IP 213開頭的
一樣是阿姆斯特丹
213.0.0.0.0∼213.255.255.255
全濾掉
誰和荷蘭有仇阿
_________________
我們用心灌溉這個園地,讓他更茁壯

[bighands]

呵 我也有咧

201.29.159.214

猛衝 .........

[wenchi]

真巧,我也是相同情況,這三天來真嚴重,不分日夜地幾乎洗版。
某一天擋信數量居然己經高達五萬封多

[一業殊]

[Arnor]

[october]

駭客DDOS攻擊 灌爆數百網咖、企業

【中時電子報 】


蔡旻岳／台北報導大陸駭客再度大舉侵台！這次鎖定的目標，換成網咖業者及民營企業。據警方調查，六月中旬至今，全省已有數百家連鎖網咖及公司行號陸續遭到歹徒以分散式阻斷服務攻擊模式（ＤＤＯＳ)手法攻擊癱瘓網頁，然後再利用網路電話恐嚇取財，要求交付數十萬元不等，引發業界極大恐慌。

刑事局初步清查，證實發起這波網路攻擊的電腦駭客ＩＰ位址，都設在中國大陸，由於以ＤＤＯＳ手法進行破壞，必須先得知被害者的ＩＰ並植入攻擊程式，因此警方研判應是大陸駭客勾結台灣詐騙(新聞)集團共同犯案。

垃圾入侵 網咖無法營生

警方表示，從六月中旬開始，台北縣板橋、汐止、桃園、新竹、台中、高雄等地的連鎖網咖店，先後遭到網路駭客的鎖定，不論是使用通訊傳輸Ｔ1專線或ＡＤＳＬ的網路連線，都遭到駭客不斷丟擲大量垃圾訊息資料，造成各家網咖形同癱瘓，生意量銳減。一名被害業者透露，以前每天平均營收可達一、二十萬，現在掉到只有二千元不到。

除了全省各地的網咖遭到駭客入侵外，連中南部的許多知名企業也被波及，犯罪集團甚至恐嚇會直接將放在網頁上的資料進行銷毀及竊取，使得許多原本將公司文件、員工資料及各項發明放在網頁上的業者趕緊複製後進行刪除，深怕心血毀於一旦。

恐嚇勒贖 業者忍痛付款

據了解，犯罪集團每次透過主控程式展開攻擊後，就會以電話向業者恐嚇勒贖二十到五十萬不等的金額，如果不從，就持續展開攻擊直到無法經營，許多業者不堪其擾，只有忍痛付錢匯款；也有業者不願屈服，找上中華電信，以設定控制流量的方式企圖阻擋大量垃圾訊息的入侵，但網路速度仍明顯受到影響，生意持續下滑。

刑事局在接獲多起報案後展開調查發現，犯罪集團都是將主控程式設在大陸地區，以多個假ＩＰ或浮動ＩＰ製造攻擊發起點，再利用在台的犯罪成員將攻擊程式攜入網咖或大企業公司內植入攻擊程式，只要電腦系統出現漏洞疏於掃瞄未查出遭到設定，很容易就成為ＤＤＯＳ固定攻擊的對象。

隔海犯案 主謀逍遙對岸

犯罪集團不僅將電腦主機設在大陸，連打給被害人的恐嚇電話都是利用難以監控的網路電話隔海搖控，警方目前只能針對被害人提供的匯款帳號及取款錄影帶鎖定查緝，短期內最多也只能逮到下游的車手成員，即使循線查出來自大陸沿海地區發動攻擊的幕後主謀，在目前兩岸情勢下，也難以跨海抓人。

歹徒也知道警方的弱點，就在業者報案後，仍不間斷地進行垃圾郵件的疲勞轟炸，部分原先堅持不向惡勢力低頭的業者，為了生計，私下也已打算妥協，這些業者氣憤又無奈地表示，連在台灣做生意都不安全，政府保護民眾的良策究竟在哪？
_________________
我們用心灌溉這個園地,讓他更茁壯

[小沛]

其實DDOS這應該也是可以防範的吧？

例如給它個判斷，如果同一個IP在指定時間內，超過??次就暫時封鎖！

五分鐘或更久就會解開鎖定∼在攻擊就持續這方式∼我想這應該可行吧？
_________________
The house of dream
https://www.dreamhome.com.tw 夢想的家

[wenchi]

82.233.220.162這ip從昨夜約11時開始狂smtp迄今仍然狂中,我已經列入防火牆的黑名單中

[wenchi]

從防火牆log中得知這82.233.220.162迄今還在狂smtp中,已經有三天久了。