安装5分钟的小鸡就有两个成功登陆的陌生ip?求大佬解惑

9次阅读

共计 1159 个字符,预计需要花费 3 分钟才能阅读完成。

本帖最后由 corporation 于 2024-5-16 00:42 编辑
journalctl _COMM=sshd | grep ‘Accepted’ | awk ‘{print $0}’
Aug 16 02:14:28 static sshd[473]: Accepted password for jevin from 178.63.62.213 port 57622 ssh2
Aug 16 02:15:25 static sshd[509]: Accepted password for root from 178.63.62.213 port 57624 ssh2
Aug 16 02:26:41 static sshd[418]: Accepted password for root from 178.63.62.213 port 57630 ssh2
Aug 16 02:28:07 static sshd[418]: Accepted password for root from 178.63.62.213 port 57632 ssh2
Aug 16 02:30:55 static sshd[401]: Accepted password for root from 178.63.62.213 port 57638 ssh2
Aug 16 02:32:31 static sshd[418]: Accepted password for root from 178.63.62.213 port 57646 ssh2
Aug 16 02:35:56 static sshd[418]: Accepted password for root from 178.63.62.213 port 57648 ssh2
Aug 16 02:42:30 static sshd[419]: Accepted password for root from 178.63.62.213 port 57660 ssh2
Aug 16 02:52:07 static sshd[420]: Accepted password for root from 178.63.62.213 port 57670 ssh2
Aug 16 02:52:43 static sshd[439]: Accepted password for root from 106.193.211.155 port 7318 ssh2
Aug 16 03:10:32 static sshd[424]: Accepted password for root from 106.193.211.155 port 7664 ssh2
mjj 大佬送的 virtono 小鸡,重新安装 debian12 5 分钟不到就发现几个陌生 ip 的成功登陆,一个是印度的一个是德国 hz 的,我用的 20 多位高强度密码。换成 debian 11 依然一样,登陆 ip 换了,并且改了我的 hostname。。。有大佬知道这是怎么回事吗?
date
Wed 15 May 2024 12:21:54
为什么这个登陆信息显示 aug 八月份?

正文完
 0