vps：搬瓦工 cn gia 65（dc9），
环境：Centos 7 x86_64 bbr centos7+233v2ray一键脚本+宝塔7免费版+typecho+bbr-plus一键脚本
用来扶墙和几个简单网页发布，最近一两个月总是会服务暂停，登陆kiwivm.64clouds.com后台看到Network abuse: Mass Mailing的提示（附在最后）。
之后尝试了：
1. 更换SSH端口和密码，开通后台的二次验证登录；更换宝塔面板端口和密码，开通二次验证登录；更换v2ray端口和设置；重启VPS，几天后仍被暂停
2. 切换DC3机房，切换回DC9，ip没变，几天后被暂停
3. 备份数据后，重新安装系统为Centos 7 x86_64 bbr，两天内没有被暂停，然后不使用v2ray 的233脚本，用官网脚本安装v2ray，两天后服务被暂停
```
yum -y install wget
wget https://install.direct/go.sh
sudo bash go.sh
sudo systemctl start v2ray
```
发了bwg工单，客服回复他们不管客户软件问题。
求助下大佬们，怎么解决这个问题？是centos 系统或者v2ray有bug？
搬瓦工暂停服务的原因提示：
Reason: Network abuse: Mass Mailing
More details: We have detected a large number of outgoing SMTP connections originating from this server. This usually means that the server is sending out spam.
Additional information（bwg ip 改为了123.123.123.123）:
1581710224.343711 Cnnb5a4Kp2xDjGXxM1 123.123.123.123 37156 74.125.20.26 25 1 - - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 74.125.20.26,123.123.123.123 - T (empty) F
1581710698.536005 Cy4mcsl5wAT7AmoDd 123.123.123.123 37184 74.125.20.26 25 1 [100.74.12.42] - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 74.125.20.26,123.123.123.123 - T (empty) F
1581710742.982538 C2nPST1V6PoG1HkMGb 123.123.123.123 37186 74.125.20.26 25 1 dfymirandari.com - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 74.125.20.26,123.123.123.123 - T (empty) F
1581710916.786263 C4ImSq1ydW5OZDnbS4 123.123.123.123 37194 74.125.20.26 25 1 y2.localhost - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 74.125.20.26,123.123.123.123 - T (empty) F
1581710940.364672 CN6AwP1AG6UI4fkkEc 123.123.123.123 37198 74.125.20.26 25 1 oo3.local - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 74.125.20.26,123.123.123.123 - T (empty) F
1581710940.923473 CGfUsn3eDcY5BqtZua 123.123.123.123 37200 74.125.20.26 25 1 redjaidaop.com - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 74.125.20.26,123.123.123.123 - T (empty) F
1581710958.257594 CfVLXJALqs8UJ2b2i 123.123.123.123 59362 64.233.177.27 25 1 encathleenpq.com - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 64.233.177.27,123.123.123.123 - T (empty) F
1581711376.727651 CpBUZGvYnCrroVLj5 123.123.123.123 37228 74.125.20.26 25 1 y01.local - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 74.125.20.26,123.123.123.123 - T (empty) F
1581711536.260695 CyKpRI4bJ0QNHiSbj 123.123.123.123 59582 64.233.177.27 25 1 pesheribe.com - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 64.233.177.27,123.123.123.123 - T (empty) F
1581711552.614375 Crg86x465khTgclS4b 123.123.123.123 59506 173.194.77.26 25 1 hjptamiaczn.com - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 173.194.77.26,123.123.123.123 - T (empty) F
Abuse points: 100 – points added for this suspension
Total abuse points: 600 – total points already accumulated during current calendar year
Max abuse points: 1300 – maximum points allowed within one calendar year; after reaching this number service will be permanently suspended until end of year.
How to resolve: This usually happens when your server is rooted/hacked. Make sure to install a clean OS immediately after resuming service, otherwise the issue will likely repeat.
You can unsuspend service as long as Total abuse points accumulated within one calendar year is less than Max abuse points allowed by your plan.
By clicking the button above you agree to take all measures to prevent future TOS violations.
You also acknowledge that if/when Total abuse points exceeds Maximum abuse points within this calendar year, then service will be disabled until January 1, 2021. |
发表于 2020-2-15 11:50:09
楼主
