Chinaunix

标题: 服务器last显示有很多这样的显示 [打印本页]

作者: wj98127 时间: 2006-10-11 10:18
标题: 服务器last显示有很多这样的显示
test    pts/0       61.167.36.3    Sat Sep 30 01:04 - 01:04  (00:00)
test    pts/0       218.247.185.218  Fri Sep 29 23:35 - 23:35  (00:00)
test    pts/0       218.249.2.2    Fri Sep 29 09:23 - 09:23  (00:00)
test    pts/0       61.145.246.101 Fri Sep 29 04:05 - 04:05  (00:00)
test    pts/0       202.158.161.7 Thu Sep 28 20:33 - 20:33  (00:00)
test    pts/0       222.215.152.64 Thu Sep 28 17:27 - 17:27  (00:00)
test    pts/0       218.247.185.222  Thu Sep 28 08:35 - 08:35  (00:00)
test    pts/0       58.241.9.2    Wed Sep 27 20:17 - 20:17  (00:00)
test    pts/0       61.167.36.3    Wed Sep 27 04:40 - 04:40  (00:00)
test    pts/0       210.75.200.104 Wed Sep 27 00:55 - 00:55  (00:00)
test    pts/0       124.0.120.153 Tue Sep 26 17:30 - 17:30  (00:00)
test    pts/0       211.137.44.113 Tue Sep 26 17:02 - 17:02  (00:00)
test    pts/0       61.133.95.228 Mon Sep 25 19:29 - 19:29  (00:00)
test    pts/0       61.129.109.96 Mon Sep 25 11:24 - 11:24  (00:00)
test    pts/0       61.178.127.182 Mon Sep 25 06:24 - 06:24  (00:00)
test    pts/0       203.34.153.21 Mon Sep 25 00:42 - 00:42  (00:00)
test    pts/0       61.141.250.110 Sun Sep 24 06:47 - 06:47  (00:00)
test    pts/0       222.77.178.116 Sun Sep 24 05:42 - 05:42  (00:00)
test    pts/0       61.167.36.3    Sat Sep 23 14:47 - 14:47  (00:00)
test    pts/0       gati.com       Sat Sep 23 12:40 - 12:40  (00:00)
test    pts/0       61.167.36.3    Sat Sep 23 04:46 - 04:46  (00:00)
test    pts/0       61.167.36.3    Wed Sep 20 12:00 - 12:00  (00:00)
test    pts/0       ds3.missgroovy.c Wed Sep 20 03:25 - 03:25  (00:00)
test    pts/0       ds3.missgroovy.c Wed Sep 20 03:07 - 03:07  (00:00)
test    pts/0       61.167.36.3    Tue Sep 19 19:54 - 19:54  (00:00)
test    pts/0       61.187.78.21    Tue Sep 19 08:50 - 08:50  (00:00)
test    pts/0       61.187.78.21    Tue Sep 19 08:32 - 08:32  (00:00)
test    pts/0       61.243.90.149 Tue Sep 19 00:26 - 00:26  (00:00)
test    pts/0       218.31.157.27 Tue Sep 12 05:04 - 05:04  (00:00)
test    pts/0       61.243.90.149 Sun Sep 10 13:51 - 13:51  (00:00)
test    pts/0       61.72.48.218    Sun Sep 10 11:58 - 11:58  (00:00)
test    pts/0       61.232.3.44    Sun Sep 10 03:22 - 03:22  (00:00)
test    pts/0       61.237.229.21 Sat Sep  9 17:45 - 17:45  (00:00)
test    pts/0       61.47.10.7    Sat Sep  9 11:55 - 11:55  (00:00)
test    pts/0       61.166.111.80 Fri Sep  8 23:22 - 23:22  (00:00)
test    pts/0       61.232.3.44    Fri Sep  8 22:49 - 22:49  (00:00)
test    pts/0       121.150.30.7    Fri Sep  8 12:27 - 12:27  (00:00)
test    pts/0       61.167.36.3    Fri Sep  8 11:12 - 11:12  (00:00)
test    pts/0       61.237.229.21 Fri Sep  8 06:39 - 06:39  (00:00)
test    pts/0       61.237.229.21 Fri Sep  8 06:36 - 06:36  (00:00)
test    pts/0       61.237.229.21 Fri Sep  8 06:25 - 06:25  (00:00)
test    pts/0       89.35.58.74    Fri Sep  8 06:07 - 06:07  (00:00)
test    pts/0       61.237.229.21 Fri Sep  8 06:04 - 06:04  (00:00)
test    pts/0       61.237.229.21 Fri Sep  8 05:54 - 05:54  (00:00)
test    pts/0       60.209.4.34    Fri Sep  8 04:12 - 04:12  (00:00)
test    pts/0       211.214.142.22 Thu Sep  7 17:32 - 17:32  (00:00)
test    pts/0       tekws02.tekceter Wed Sep  6 21:42 - 21:42  (00:00)
test    pts/0       211.137.210.230  Wed Sep  6 14:27 - 14:27  (00:00)
test    pts/0       202.136.62.130 Wed Sep  6 04:31 - 04:31  (00:00)
test    pts/0       218.16.143.53 Tue Sep  5 20:05 - 20:05  (00:00)
test    pts/0       218.16.143.53 Tue Sep  5 19:47 - 19:47  (00:00)
test    pts/0       219.94.130.145 Tue Sep  5 14:54 - 14:54  (00:00)
test    pts/0       60.209.4.35    Tue Sep  5 00:39 - 00:39  (00:00)
test    pts/1       61-64-132-168-ad Mon Sep  4 17:57 - 17:57  (00:00)

这个用户每次登陆的时间都是0 。。
这是为什么。

作者: 夜鹰007 时间: 2006-10-14 00:14
晕~~~

作者: zhangr 时间: 2006-10-14 01:47
会不会是有特殊目的，
比如只是ssh 过来，执行个命令？

作者: wj98127 时间: 2006-10-15 22:02

原帖由 zhangr 于 2006-10-14 01:47 发表
会不会是有特殊目的，
比如只是ssh 过来，执行个命令？

不会的。。现在把这个帐户lock了。最近是没有。不不知道是为什么会出现。

作者: hmqq 时间: 2006-10-15 22:11
test用户的口令很简单，还可能没有shell，别人扫描就会这样了。

欢迎光临 Chinaunix (http://bbs.chinaunix.net/)