从昨天起,我的日志中就有无数行这样的¹。IP 上的 whois 显示
$ whois 23.97.134.64
...
NetRange: 23.96.0.0 - 23.103.255.255
CIDR: 23.96.0.0/13
OriginAS: AS8075
NetName: MSFT
NetHandle: NET-23-96-0-0-1
Parent: NET-23-0-0-0-0
NetType: Direct Assignment
RegDate: 2013-06-18
Updated: 2013-06-18
Ref: http://whois.arin.net/rest/net/NET-23-96-0-0-1
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2013-08-21
...
微软是否试图入侵我的邮件服务器?
¹
May 27 19:24:33 31337 postfix/smtps/smtpd[20048]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 27 19:24:59 31337 postfix/smtps/smtpd[20048]: warning: unknown[23.97.216.188]: SASL LOGIN authentication failed: authentication failure
May 27 19:25:00 31337 postfix/smtps/smtpd[20064]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 27 19:25:26 31337 postfix/smtps/smtpd[20048]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 27 19:25:50 31337 postfix/smtps/smtpd[20064]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 27 19:25:52 31337 postfix/smtps/smtpd[20048]: warning: unknown[23.97.216.188]: SASL LOGIN authentication failed: authentication failure
....
May 28 09:00:19 31337 postfix/smtps/smtpd[30240]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 28 09:00:52 31337 postfix/smtps/smtpd[30240]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 28 09:01:17 31337 postfix/smtps/smtpd[30240]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 28 09:04:42 31337 postfix/smtps/smtpd[30240]: connect from unknown[23.97.134.64]
May 28 09:04:46 31337 postfix/smtps/smtpd[30240]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 28 09:04:48 31337 postfix/smtps/smtpd[30240]: lost connection after AUTH from unknown[23.97.134.64]
May 28 09:04:48 31337 postfix/smtps/smtpd[30240]: disconnect from unknown[23.97.134.64]
答案1
如果您所说的“Microsoft”是指租用 Azure VM 的人:那么也许如此。
此范围确实属于 Microsoft,并由 Azure 使用(请参阅:http://www.microsoft.com/en-us/download/details.aspx?id=41653)
因此,这几乎可以是任何人。
您可能需要联系 Microsoft 的滥用部门。
或者像忽略您在公共服务中听到的其他背景噪音一样忽略它。