2014年12月27日 星期六

有人電腦挺閒的在Try主機密碼

Dec 27 13:02:14 sshd[26144]: Received disconnect from 103.41.124.39: 11: [preauth]
Dec 27 13:02:17 sshd[26146]: Failed password for root from 103.41.124.39 port 46400 ssh2
Dec 27 13:02:17 last message repeated 2 times
Dec 27 13:02:18 sshd[26146]: Received disconnect from 103.41.124.39: 11: [preauth]
Dec 27 13:02:20 sshd[26148]: Failed password for root from 103.41.124.39 port 54995 ssh2
Dec 27 13:02:20 last message repeated 2 times
Dec 27 13:02:21 sshd[26148]: Received disconnect from 103.41.124.39: 11: [preauth]
Dec 27 13:02:23 sshd[26150]: Failed password for root from 103.41.124.39 port 33366 ssh2
Dec 27 13:02:23 last message repeated 2 times
Dec 27 13:02:23 sshd[26150]: Received disconnect from 103.41.124.39: 11: [preauth]
Dec 27 13:02:25 sshd[26152]: Failed password for root from 103.41.124.39 port 39881 ssh2
Dec 27 13:02:26 last message repeated 2 times
Dec 27 13:02:26 sshd[26152]: Received disconnect from 103.41.124.39: 11: [preauth]
Dec 27 13:02:33 sshd[26154]: Failed password for root from 103.41.124.39 port 47460 ssh2
Dec 27 13:02:34 last message repeated 2 times
Dec 27 13:02:34 sshd[26154]: Received disconnect from 103.41.124.39: 11: [preauth]
Dec 27 13:02:36 sshd[26156]: Failed password for root from 103.41.124.39 port 37643 ssh2
Dec 27 13:02:37 last message repeated 2 times
Dec 27 14:31:56 sshd[28923]: Failed password for root from 61.174.50.247 port 31320 ssh2
Dec 27 14:31:56 sshd[28907]: Failed password for root from 122.225.97.96 port 43365 ssh2
Dec 27 14:31:56 sshd[28923]: Failed password for root from 61.174.50.247 port 31320 ssh2
所以讓我很認真的檢查設定檔
/etc/hosts.allow
/etc/hosts.deny
/etc/sshd/sshd_config
iptables -A INPUT -p tcp -dport 22 -J DROP
冒似沒啥問題