全球主机交流论坛

标题: 求助搬瓦工服务总是被暂停 [打印本页]

作者: ukam 时间: 2020-2-15 11:50
标题: 求助搬瓦工服务总是被暂停
vps：搬瓦工 cn gia 65（dc9），
环境：Centos 7 x86_64 bbr centos7+233v2ray一键脚本+宝塔7免费版+typecho+bbr-plus一键脚本
用来扶墙和几个简单网页发布，最近一两个月总是会服务暂停，登陆kiwivm.64clouds.com后台看到Network abuse: Mass Mailing的提示（附在最后）。
之后尝试了：
1. 更换SSH端口和密码，开通后台的二次验证登录；更换宝塔面板端口和密码，开通二次验证登录；更换v2ray端口和设置；重启VPS，几天后仍被暂停
2. 切换DC3机房，切换回DC9，ip没变，几天后被暂停
3. 备份数据后，重新安装系统为Centos 7 x86_64 bbr，两天内没有被暂停，然后不使用v2ray 的233脚本，用官网脚本安装v2ray，两天后服务被暂停
```
yum -y install wget
wget https://install.direct/go.sh
sudo bash go.sh
sudo systemctl start v2ray
```
发了bwg工单，客服回复他们不管客户软件问题。
求助下大佬们，怎么解决这个问题？是centos 系统或者v2ray有bug？

搬瓦工暂停服务的原因提示：
Reason: Network abuse: Mass Mailing
More details: We have detected a large number of outgoing SMTP connections originating from this server. This usually means that the server is sending out spam.
Additional information（bwg ip 改为了123.123.123.123）:

1581710224.343711 Cnnb5a4Kp2xDjGXxM1 123.123.123.123 37156 74.125.20.26 25 1 - - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 74.125.20.26,123.123.123.123 - T (empty) F

1581710698.536005 Cy4mcsl5wAT7AmoDd 123.123.123.123 37184 74.125.20.26 25 1 [100.74.12.42] - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 74.125.20.26,123.123.123.123 - T (empty) F

1581710742.982538 C2nPST1V6PoG1HkMGb 123.123.123.123 37186 74.125.20.26 25 1 dfymirandari.com - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 74.125.20.26,123.123.123.123 - T (empty) F

1581710916.786263 C4ImSq1ydW5OZDnbS4 123.123.123.123 37194 74.125.20.26 25 1 y2.localhost - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 74.125.20.26,123.123.123.123 - T (empty) F

1581710940.364672 CN6AwP1AG6UI4fkkEc 123.123.123.123 37198 74.125.20.26 25 1 oo3.local - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 74.125.20.26,123.123.123.123 - T (empty) F

1581710940.923473 CGfUsn3eDcY5BqtZua 123.123.123.123 37200 74.125.20.26 25 1 redjaidaop.com - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 74.125.20.26,123.123.123.123 - T (empty) F

1581710958.257594 CfVLXJALqs8UJ2b2i 123.123.123.123 59362 64.233.177.27 25 1 encathleenpq.com - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 64.233.177.27,123.123.123.123 - T (empty) F

1581711376.727651 CpBUZGvYnCrroVLj5 123.123.123.123 37228 74.125.20.26 25 1 y01.local - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 74.125.20.26,123.123.123.123 - T (empty) F

1581711536.260695 CyKpRI4bJ0QNHiSbj 123.123.123.123 59582 64.233.177.27 25 1 pesheribe.com - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 64.233.177.27,123.123.123.123 - T (empty) F

1581711552.614375 Crg86x465khTgclS4b 123.123.123.123 59506 173.194.77.26 25 1 hjptamiaczn.com - - - - - - - - - - - - - 220 2.0.0 Ready to start TLS 173.194.77.26,123.123.123.123 - T (empty) F

Abuse points: 100 – points added for this suspension
Total abuse points: 600 – total points already accumulated during current calendar year
Max abuse points: 1300 – maximum points allowed within one calendar year; after reaching this number service will be permanently suspended until end of year.
How to resolve: This usually happens when your server is rooted/hacked. Make sure to install a clean OS immediately after resuming service, otherwise the issue will likely repeat.
You can unsuspend service as long as Total abuse points accumulated within one calendar year is less than Max abuse points allowed by your plan.
By clicking the button above you agree to take all measures to prevent future TOS violations.
You also acknowledge that if/when Total abuse points exceeds Maximum abuse points within this calendar year, then service will be disabled until January 1, 2021.

作者: 雪丫鬟 时间: 2020-2-15 11:52
看翻译，不是说乱发邮件吗？是不是中马了

作者: ukam 时间: 2020-2-15 11:55

雪丫鬟发表于 2020-2-15 11:52
看翻译，不是说乱发邮件吗？是不是中马了

重新装了系统，也是这个提示

作者: 雪丫鬟 时间: 2020-2-15 11:57

ukam 发表于 2020-2-15 11:55
重新装了系统，也是这个提示

那就奇了怪了。太诡异了

作者: ukam 时间: 2020-2-15 12:00

雪丫鬟发表于 2020-2-15 11:57
那就奇了怪了。太诡异了

是啊，备份重装后只装了v2ray官方脚本，一天后就有这个乱发邮件暂停服务的提示

作者: 大帅锅 时间: 2020-2-15 12:01
提示: 作者被禁止或删除内容自动屏蔽

作者: qwerttaa 时间: 2020-2-15 12:10
我教你一个管用的笨办法

全新安装系统，然后用官方安装你常用的玩意儿，测试没问题以后snapshot备份，得到备份A

过几天被停了以后再生成snapshot备份b

把a和b备份都弄到电脑本地，然后开对比软件，挨着对比，看看到底他吗的哪里有改动

作者: ukam 时间: 2020-2-15 12:17

qwerttaa 发表于 2020-2-15 12:10
我教你一个管用的笨办法

全新安装系统，然后用官方安装你常用的玩意儿，测试没问题以后snapshot备份，得到 ...

多谢，也只能这样试下了；google了下，有几个相同的案例，有的说是发工单，客服说是系统bug，他们给解决了，有的说可能自己客户端电脑中毒，调用v2ray客户端的v2ray_privoxy.exe，导致的服务端的vps被暂停

作者: yumijie 时间: 2020-2-15 12:18
估计你脚本有问题吧

作者: 爱吃醋的醋醋 时间: 2020-2-15 12:21
提示: 作者被禁止或删除内容自动屏蔽

作者: PSBC 时间: 2020-2-15 12:21
提示: 作者被禁止或删除内容自动屏蔽

作者: ttydy 时间: 2020-2-15 12:30
出吗？

作者: Conan 时间: 2020-2-15 13:03
提示: 作者被禁止或删除内容自动屏蔽

欢迎光临全球主机交流论坛 (https://443502.xyz/)