是黑客吗？ 该如何处置？

mrlin830

Failed password for root from 58.53.194.72 port 51395 ssh2
Failed password for root from 58.53.194.72 port 51457 ssh2
Failed password for root from 58.53.194.72 port 51529 ssh2
Failed password for root from 58.53.194.72 port 51588 ssh2
Failed password for root from 58.53.194.72 port 51660 ssh2
Failed password for root from 58.53.194.72 port 51728 ssh2
Failed password for root from 58.53.194.72 port 51830 ssh2
Failed password for root from 58.53.194.72 port 51893 ssh2
Failed password for root from 58.53.194.72 port 51956 ssh2
Failed password for root from 58.53.194.72 port 52019 ssh2
Failed password for root from 58.53.194.72 port 52084 ssh2
Failed password for root from 58.53.194.72 port 52144 ssh2
..................
...............
..........
.....

在adm/syslog几乎每天都有不断持续的在尝试LOGIN,有时还是用USER ： AA BB CC DD....一连串的USER

只能加强密码吗？ 我已在/etc/default/login 加入console=tty01,
这样虽然不能远端root login 但是连本机 tty01时 都会出现not system console 怪怪！！

该如何处置呢？

没人遇过吗？？

[ 本帖最后由 mrlin830 于 2008-1-3 16:37 编辑 ]

answer

有人在尝试攻击你的机器
最好使用TCP Wrappers 屏蔽不需要的IP
以前写的，没人看，现在http://blog.chinaunix.net/u/22/showart_308211.html给你用吧，呵呵呵