求助,Vsftp 服务器问题!

sky_wolf_

各位大侠,遇到一件很奇怪的事,求助,以下是现象!

  FTP服务器,一直可以正常使用,可是最近发现总是连不上去,登录到服务器,vsftpd服务正常,但是连不上服务器,但是重启VSftpd服务之后,客户端可以连上,然后我用tail -f secure之后发现如下情况:
Jan 11 20:56:06 FtpServer sshd[799]: Failed password for root from 219.137.226.168 port 35389 ssh2
Jan 11 20:56:09 FtpServer sshd[801]: Failed password for root from 219.137.226.168 port 35393 ssh2
Jan 11 20:56:09 FtpServer sshd[803]: Illegal user oracle from 219.137.226.168
Jan 11 20:56:11 FtpServer sshd[803]: Failed password for illegal user oracle from 219.137.226.168 port 35397 ssh2
Jan 11 20:56:12 FtpServer sshd[805]: Illegal user test from 219.137.226.168
Jan 11 20:56:14 FtpServer sshd[805]: Failed password for illegal user test from 219.137.226.168 port 35399 ssh2
Jan 12 05:01:02 FtpServer sshd[1279]: Failed password for root from 202.91.247.238 port 55244 ssh2
Jan 12 08:57:18 FtpServer sshd[3081]: Illegal user user from 211.143.130.189
Jan 12 08:57:26 FtpServer sshd[3081]: Failed password for illegal user user from 211.143.130.189 port 49505 ssh2
Jan 12 10:05:34 FtpServer sshd[6334]: Failed password for root from 113.105.131.130 port 39432 ssh2
Jan 12 10:05:37 FtpServer sshd[6336]: Failed password for root from 113.105.131.130 port 40085 ssh2
Jan 12 10:05:40 FtpServer sshd[6338]: Failed password for root from 113.105.131.130 port 40732 ssh2
Jan 12 10:05:42 FtpServer sshd[6340]: Failed password for root from 113.105.131.130 port 41358 ssh2
Jan 12 10:05:45 FtpServer sshd[6342]: Failed password for root from 113.105.131.130 port 42043 ssh2
Jan 12 10:05:48 FtpServer sshd[6344]: Failed password for root from 113.105.131.130 port 42692 ssh2
Jan 12 10:05:51 FtpServer sshd[6346]: Failed password for root from 113.105.131.130 port 43361 ssh2
Jan 12 10:05:53 FtpServer sshd[6348]: Failed password for root from 113.105.131.130 port 44020 ssh2
Jan 12 10:05:56 FtpServer sshd[6350]: Failed password for root from 113.105.131.130 port 44683 ssh2
Jan 12 10:05:59 FtpServer sshd[6352]: Failed password for root from 113.105.131.130 port 45339 ssh2
Jan 12 10:06:02 FtpServer sshd[6354]: Failed password for root from 113.105.131.130 port 45959 ssh2
Jan 12 10:06:05 FtpServer sshd[6356]: Failed password for root from 113.105.131.130 port 46610 ssh2
Jan 12 10:06:07 FtpServer sshd[6358]: Failed password for root from 113.105.131.130 port 47225 ssh2




每次只要发现这种连接,哪怕只连接一次,我的服务器就登录不上去!只能重启vsftpd服务之后才可以登录!

麻烦各位大侠帮助分析一下原因,提供一个解决方案!

谢谢!

vermouth

是不是有人频繁的扫描你的 ftp，把连接数沾满了啊？ 在 iptables 上加个连接限制试试~

7717060

iptables -t filter -A INPUT -s 113.105.131.130 -j DROP

ubuntuer

应该是113.105.131.130这个做了坏事

sky_wolf_

谢谢,各位大侠,我把root远程登录给禁止了,目前暂时解决了这个问题!

blueswxs

原帖由 sky_wolf_ 于 2010-1-12 16:02 发表
谢谢,各位大侠,我把root远程登录给禁止了,目前暂时解决了这个问题!

管理员root应该在装完系统后就要更改或禁止远程登录。

vermouth

或者改个名~

chenyx

管理员还是禁止远程登录的好