Chinaunix

标题: 大家碰到这种 ssh 猜密码的攻击吗？ [打印本页]

作者: popobsd 时间: 2005-08-08 10:24
标题: 大家碰到这种 ssh 猜密码的攻击吗？
每次猜两个，不对继续猜别的..
虽然很蠢，但是很多不小心的管理员管理的机器可能就会给破了..
有什么好办法不影响机器正常的工作，又杜绝这种情况呢？

==>; everything/current <==
Aug  8 10:19:45 [sshd] Invalid user kevin from 210.127.244.219

==>; sshd/current <==
Aug  8 10:19:46 [sshd] Invalid user timothy from 210.127.244.219

==>; everything/current <==
Aug  8 10:19:46 [sshd] Invalid user timothy from 210.127.244.219

==>; sshd/current <==
Aug  8 10:19:47 [sshd] Invalid user trevor from 210.127.244.219

==>; everything/current <==
Aug  8 10:19:47 [sshd] Invalid user trevor from 210.127.244.219

==>; sshd/current <==
Aug  8 10:19:48 [sshd] Invalid user jared from 210.127.244.219
Aug  8 10:19:48 [sshd] Invalid user parker from 210.127.244.219

==>; everything/current <==
Aug  8 10:19:48 [sshd] Invalid user jared from 210.127.244.219
Aug  8 10:19:48 [sshd] Invalid user parker from 210.127.244.219

==>; sshd/current <==
Aug  8 10:19:49 [sshd] Invalid user xander from 210.127.244.219

==>; everything/current <==
Aug  8 10:19:49 [sshd] Invalid user xander from 210.127.244.219

==>; sshd/current <==
Aug  8 10:19:50 [sshd] Invalid user spencer from 210.127.244.219

==>; everything/current <==
Aug  8 10:19:50 [sshd] Invalid user spencer from 210.127.244.219

==>; sshd/current <==
Aug  8 10:19:51 [sshd] Invalid user will from 210.127.244.219

==>; everything/current <==
Aug  8 10:19:51 [sshd] Invalid user will from 210.127.244.219

==>; sshd/current <==
Aug  8 10:19:52 [sshd] Invalid user wyatt from 210.127.244.219

==>; everything/current <==
Aug  8 10:19:52 [sshd] Invalid user wyatt from 210.127.244.219

==>; sshd/current <==
Aug  8 10:19:55 [sshd] Invalid user lucky from 210.127.244.219

作者: 我爱钓鱼 时间: 2005-08-08 10:30
标题: 大家碰到这种 ssh 猜密码的攻击吗？
很正常。。。。在本版搜一下ssh就可以找到你要的答案。

作者: zzzzzjjjjj 时间: 2005-08-08 11:18
标题: 大家碰到这种 ssh 猜密码的攻击吗？
我得一台服务器就是被这样拿下了，通过postgres(装完postgres会自动生成一个用户，当时没在意)现在机器已经OK了，可是我的pts/0 pts/1却找不到了，ssh上去就是pts/2。心里发毛......有些。

欢迎光临 Chinaunix (http://bbs.chinaunix.net/)