微软是否试图入侵我的邮件服务器?

微软是否试图入侵我的邮件服务器?

从昨天起,我的日志中就有无数行这样的¹。IP 上的 whois 显示

$ whois 23.97.134.64

...

NetRange:       23.96.0.0 - 23.103.255.255
CIDR:           23.96.0.0/13
OriginAS:       AS8075
NetName:        MSFT
NetHandle:      NET-23-96-0-0-1
Parent:         NET-23-0-0-0-0
NetType:        Direct Assignment
RegDate:        2013-06-18
Updated:        2013-06-18
Ref:            http://whois.arin.net/rest/net/NET-23-96-0-0-1


OrgName:        Microsoft Corporation
OrgId:          MSFT
Address:        One Microsoft Way
City:           Redmond
StateProv:      WA
PostalCode:     98052
Country:        US
RegDate:        1998-07-10
Updated:        2013-08-21
...

微软是否试图入侵我的邮件服务器?

¹

May 27 19:24:33 31337 postfix/smtps/smtpd[20048]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 27 19:24:59 31337 postfix/smtps/smtpd[20048]: warning: unknown[23.97.216.188]: SASL LOGIN authentication failed: authentication failure
May 27 19:25:00 31337 postfix/smtps/smtpd[20064]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 27 19:25:26 31337 postfix/smtps/smtpd[20048]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 27 19:25:50 31337 postfix/smtps/smtpd[20064]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 27 19:25:52 31337 postfix/smtps/smtpd[20048]: warning: unknown[23.97.216.188]: SASL LOGIN authentication failed: authentication failure
....
May 28 09:00:19 31337 postfix/smtps/smtpd[30240]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 28 09:00:52 31337 postfix/smtps/smtpd[30240]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 28 09:01:17 31337 postfix/smtps/smtpd[30240]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 28 09:04:42 31337 postfix/smtps/smtpd[30240]: connect from unknown[23.97.134.64]
May 28 09:04:46 31337 postfix/smtps/smtpd[30240]: warning: unknown[23.97.134.64]: SASL LOGIN authentication failed: authentication failure
May 28 09:04:48 31337 postfix/smtps/smtpd[30240]: lost connection after AUTH from unknown[23.97.134.64]
May 28 09:04:48 31337 postfix/smtps/smtpd[30240]: disconnect from unknown[23.97.134.64]

答案1

如果您所说的“Microsoft”是指租用 Azure VM 的人:那么也许如此。
此范围确实属于 Microsoft,并由 Azure 使用(请参阅:http://www.microsoft.com/en-us/download/details.aspx?id=41653
因此,这几乎可以是任何人。

您可能需要联系 Microsoft 的滥用部门。
或者像忽略您在公共服务中听到的其他背景噪音一样忽略它。

相关内容