Guten Morgen,
wir hatten auf einer der Maschinen einen Bruteforce angriff, welcher scheinbar LiveConfig ausgehebelt hat, da über Fiktive E-Mail Adressen munter SPAM versendet wurde und wird, wie z.B
Code
1163B427954 5248 Tue Apr 15 03:53:03 info@howtomeasurecobb.com
(host mx00.emig.gmx.net[212.227.15.9] refused to talk to me: 554-gmx.net (mxgmx009) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://postmaster.gmx.net/en/case?c=r0302&i=ip&v=5.1.95.175&r=1MmRkp-1tM8Nz0pmr-00iYBU)
[redacted]@gmx.net
D228D425F44 106036 Tue Apr 15 03:31:01 astywqy@listinser.mom
(host mx-ha02.web.de[212.227.17.8] refused to talk to me: 554-web.de (mxweb105) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://postmaster.web.de/en/case?c=r0302&i=ip&v=5.1.95.175&r=1N94iT-1szUyn2Kud-015ffT)
[redacted]@web.de
85762420187 126595 Tue Apr 15 02:11:38 ymfyypy@nikosale.makeup
(host mx01.emig.gmx.net[212.227.17.5] refused to talk to me: 554-gmx.net (mxgmx106) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://postmaster.gmx.net/en/case?c=r0302&i=ip&v=5.1.95.175&r=1MGwUl-1trbBl15PP-004Z24)
[redacted]@gmx.net
582AE3826AE 37693 Tue Apr 15 05:26:09 msprvs1=20200Uh5FyTYc=bounces-15996-85049@bounce.ecomailapp.cz
(host mx-ha03.web.de[212.227.15.17] refused to talk to me: 554-web.de (mxweb006) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://postmaster.web.de/en/case?c=r0302&i=ip&v=5.1.95.175&r=1MBkMK-1tsREU1ycG-00CauW)
[redacted]@web.de
B18AB3DE52A 106063 Mon Apr 14 23:25:58 imduplx@folowaunt.de
(host mx01.emig.gmx.net[212.227.17.5] refused to talk to me: 554-gmx.net (mxgmx107) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://postmaster.gmx.net/en/case?c=r0302&i=ip&v=5.1.95.175&r=1MWxTV-1tXBJb25Yv-00Xq8q)
[redacted]@gmx.de
[redacted]@gmx.de
068BA426C5A 163644 Tue Apr 15 03:42:12 uwzacry@collo.in.rs
(host mx-ha03.web.de[212.227.15.17] refused to talk to me: 554-web.de (mxweb004) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://postmaster.web.de/en/case?c=r0302&i=ip&v=5.1.95.175&r=1MVdtA-1tcyF045pM-00HjTq)
[redacted]@web.de
0FA722A97C8 26162 Tue Apr 15 04:22:23 jkmsh@thebestone.click
(host mx-ha03.web.de[212.227.15.17] refused to talk to me: 554-web.de (mxweb004) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://postmaster.web.de/en/case?c=r0302&i=ip&v=5.1.95.175&r=1Mj8Rl-1tPR5n0zuH-00mojE)
[redacted]@web.de
04E3C407615 126582 Tue Apr 15 00:31:40 oqzyqlk@linkersame.eu
(host mx00.emig.gmx.net[212.227.15.9] refused to talk to me: 554-gmx.net (mxgmx007) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://postmaster.gmx.net/en/case?c=r0302&i=ip&v=5.1.95.175&r=1MkpvZ-1tJC9J1grv-00ojcN)
[redacted]@gmx.de
[redacted]@gmx.de
0C9EC409F50 106038 Tue Apr 15 01:03:38 ywhobhj@listinser.mom
(host mx00.emig.gmx.net[212.227.15.9] refused to talk to me: 554-gmx.net (mxgmx007) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://postmaster.gmx.net/en/case?c=r0302&i=ip&v=5.1.95.175&r=1M58OU-1u3TYg1F7U-005HgA)
[redacted]@gmx.net
471234111CD 126597 Tue Apr 15 06:40:13 anqarrn@nikosale.makeup
(host mx-ha02.web.de[212.227.17.8] refused to talk to me: 554-web.de (mxweb105) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://postmaster.web.de/en/case?c=r0302&i=ip&v=5.1.95.175&r=1MBRi9-1tsiR70wcJ-00CrOi)
[redacted]@web.de----
Hat jemand eine Idee, wie man die Lücke ausfindig machen könnte?
