我的服务器做了别人的肉鸡?????????

Ecore

是密码太简单了？

还是被溢了？？

难道被黑了，还不快断线解决。

还挂着做服务器啊？

牙齿晒太阳

/root/.ssh/known_hosts 的内容
那几个局域网的ip是其他的服务器
服务器是在电信通的机房219.238.233.78
怎么还有个乌鲁木齐的ip？？？

219.238.233.78 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAu6SWgxG2mWDKvSuBZXpoWQgcusmoAi7j/81VnuphYF5GOI6lwVTSSPTRTJED9l7UNpkeYpm/fYLBhSKsFhURDP+jvsXdQam0p6uo+LSY/rKoGM9XIr7XAC4S2txmI6cZa1x63HWCG6k98/TU7ZeVvyCFNwDQNX5wcqPchfw0Klc=
61.128.100.118 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAy4AIswIYjBA4xJ9spKhO/TN++AxJ249a4kN4nXp8MKBYfoaD3qGTG9uikndM52VE9gm6MZyAcdVbf9pmZrqwpfsl4xrcfZhF7vJF5qBmkr0PwQtBMFXad68fAkrR1HP3UG81CwPMx8SOKhxI7rKnOyJeheySwuNCyU1EDl5dsKU=
192.168.0.220 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAvp3Mboe5J3jjIIRRoymZbGb0VH4TGWvWfK3MFzppUvNc52Qgbu7h3wENFPMTFvBGzibHUiPcQPPt+V91letT0Siwcv4Lxte9AOsrpaTJYoL/SxxbPmTwCyY0iV7EcKNSv3+oZ7xcGQuUvfDgADEwd7l7NKg/9e5aweoKXCC2fW8=
192.168.0.221 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAtlL6OgFa5yCrVWrFM3dcvQTjTG3KthFLC/1JjXW1+vdNfzObrInF/SzCDAwg9429KaH38C7eLgMhIhOOGbzr8LrPIr0CDzr6dMtkPUHcnnHY0aLcobckSRMaYQbN25CLJiZNbUstJXFy7r9ZIYQ88wXqGl/OeFhyFO6Y3URUMuc=
192.168.0.11 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAw6cVIyDfDPcsadlEHOHxxu6cShanXfvc/5OeZXyVsjK/VGB1JLkWutGzs9GdaZQhrxm6SGcJRuQ7HL0yPtogH3854RbGIZ2u+rhuylh7LilfHPqhQ90uSMKS7S2wNbBOyoJEWdITBvGiGqcxmCmnqcM3hvAb7UtjapgrV02NFXM=
192.168.0.9 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAr0fkuNTVT6d0C6xddqcFQTKrLBLToBhM0ZfXnRgmlUbNj18dSbD0bhAjlEyt0EojK3mrAGXAAOqy7ayGPUSxyfOhbUAcFilw+wA4IwafhOEpalt5CRUVFLe0+esrau2UhOf0k9au90qK9zdZfh9+HqKro/oeGqeZIMrja4WOcnM=

牙齿晒太阳

原帖由 "Ecore" 发表：
是密码太简单了？

还是被溢了？？

难道被黑了，还不快断线解决。

还挂着做服务器啊？

密码很复杂的，主要是服务器不能停，网上报名阶段，现在网页打开的很慢甚至无法打开，在出现问题前增加了一个免费的论坛，会不会是论坛由后门？
我也有把论坛停掉，但不成

Ecore

把服务器搬我们公司!

嘿嘿!!

last

history

see下。

牙齿晒太阳

messages中的信息都是這些

Jan 30 12:39:13 mail last message repeated 13 times
Jan 30 12:40:18 mail last message repeated 13 times
Jan 30 12:41:23 mail last message repeated 13 times
Jan 30 12:42:28 mail last message repeated 13 times
Jan 30 12:43:33 mail last message repeated 13 times
Jan 30 12:44:38 mail last message repeated 13 times
Jan 30 12:45:43 mail last message repeated 13 times
Jan 30 12:46:48 mail last message repeated 13 times
Jan 30 12:47:53 mail last message repeated 13 times
Jan 30 12:48:58 mail last message repeated 13 times
Jan 30 12:50:03 mail last message repeated 13 times
Jan 30 12:51:08 mail last message repeated 13 times
Jan 30 12:52:13 mail last message repeated 13 times
Jan 30 12:53:18 mail last message repeated 13 times
Jan 30 12:54:23 mail last message repeated 13 times
Jan 30 12:55:28 mail last message repeated 13 times
Jan 30 12:56:33 mail last message repeated 13 times
Jan 30 12:57:38 mail last message repeated 13 times
Jan 30 12:58:43 mail last message repeated 13 times
Jan 30 12:59:48 mail last message repeated 13 times
Jan 30 13:00:53 mail last message repeated 13 times
Jan 30 13:01:58 mail last message repeated 13 times
Jan 30 13:03:03 mail last message repeated 13 times

牙齿晒太阳

Jan 23 04:02:22 mail cups: cupsd 关闭 succeeded
Jan 23 04:02:23 mail pam_timestamp_check: pam_timestamp: `/var/' permissions are lax
Jan 23 04:02:23 mail modprobe: modprobe: Can't locate module char-major-188
Jan 23 04:02:23 mail last message repeated 15 times
Jan 23 04:02:23 mail cups: cupsd 启动 succeeded
Jan 23 04:02:23 mail nmbd[18720]: [2005/01/23 04:02:23, 0] nmbd/nmbd.c:process(540)
Jan 23 04:02:23 mail nmbd[18720]:   Got SIGHUP dumping debug info.
Jan 23 04:02:23 mail nmbd[18720]: [2005/01/23 04:02:23, 0] nmbd/nmbd_workgroupdb.c:dump_workgroups(266)
Jan 23 04:02:23 mail nmbd[18720]:   dump_workgroups()
Jan 23 04:02:23 mail nmbd[18720]:    dump workgroup on subnet    192.168.0.10: netmask=  255.255.255.0:
Jan 23 04:02:23 mail nmbd[18720]:   ^IWORKGROUP(1) current master browser = MAIL
Jan 23 04:02:23 mail nmbd[18720]:   ^I^IMAIL 40049a03 (169 Samba Server)
Jan 23 04:02:23 mail smbd[18716]: [2005/01/23 04:02:23, 0] param/loadparm.c:map_parameter(2413)
Jan 23 04:02:23 mail smbd[18716]:   Unknown parameter encountered: "pulic"
Jan 23 04:02:23 mail smbd[18716]: [2005/01/23 04:02:23, 0] param/loadparm.c:lp_do_parameter(3057)
Jan 23 04:02:23 mail smbd[18716]:   Ignoring unknown parameter "pulic"
Jan 23 04:02:28 mail pam_timestamp_check: pam_timestamp: `/var/' permissions are lax

牙齿晒太阳

#netstat -nap |grep LIST
tcp        0      0 0.0.0.0:445             0.0.0.0:*               LISTEN      
unix  2      [ ACC ]     STREAM     LISTENING     2265   /tmp/.gdm_socket
unix  2      [ ACC ]     STREAM     LISTENING     1522   /dev/gpmctl
unix  2      [ ACC ]     STREAM     LISTENING     2543943 /tmp/orbit-root/linc-3999-0-27d029ff2b281
unix  2      [ ACC ]     STREAM     LISTENING     2586611 /tmp/orbit-root/linc-5151-0-ff8856ba2d3b
unix  2      [ ACC ]     STREAM     LISTENING     1679   /tmp/.font-unix/fs7100
unix  2      [ ACC ]     STREAM     LISTENING     2415   /tmp/ssh-RfBl1045/agent.1045
unix  2      [ ACC ]     STREAM     LISTENING     2275   /tmp/.X11-unix/X0
unix  2      [ ACC ]     STREAM     LISTENING     2439   /tmp/orbit-root/linc-45e-0-295c27f5dc509
unix  2      [ ACC ]     STREAM     LISTENING     2946   /tmp/orbit-root/linc-487-0-29e9cd5d7846d
unix  2      [ ACC ]     STREAM     LISTENING     2447   /tmp/orbit-root/linc-415-0-caa9537f3dfa
unix  2      [ ACC ]     STREAM     LISTENING     2567   /tmp/orbit-root/linc-461-0-366684dd9fd55
unix  2      [ ACC ]     STREAM     LISTENING     2588   /tmp/orbit-root/linc-463-0-1cb6c36ab9231
unix  2      [ ACC ]     STREAM     LISTENING     2673   /tmp/orbit-root/linc-46f-0-1c61f1488240f
unix  2      [ ACC ]     STREAM     LISTENING     2715   /tmp/orbit-root/linc-473-0-26aea55142ef
unix  2      [ ACC ]     STREAM     LISTENING     2735   /tmp/orbit-root/linc-477-0-26aea551118e1
unix  2      [ ACC ]     STREAM     LISTENING     2768   /tmp/orbit-root/linc-475-0-26aea55179dcb
unix  2      [ ACC ]     STREAM     LISTENING     2789   /tmp/orbit-root/linc-47a-0-26aea551aca50
unix  2      [ ACC ]     STREAM     LISTENING     2906   /tmp/orbit-root/linc-47e-0-7ad73f7ef8ed
unix  2      [ ACC ]     STREAM     LISTENING     2557   /tmp/.ICE-unix/1045

wallace888

到底现在情况如何了哟，大家都来关注一下！帮助牙齿把问题解决了！

牙齿晒太阳

[root@mail .ICE-unix]# netstat -na |grep 22
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      
tcp        0      0 192.168.0.10:7001       222.77.103.241:1948     ESTABLISHED
tcp        0      0 192.168.0.10:7001       222.77.103.241:1947     ESTABLISHED
tcp        0     48 192.168.0.10:22         61.51.130.252:1351      ESTABLISHED
tcp        0      0 192.168.0.10:80         213.92.104.66:2232      TIME_WAIT   
tcp        0      0 192.168.0.10:7001       221.12.28.210:55421     ESTABLISHED
tcp        0      0 192.168.0.10:7001       221.12.28.210:55418     ESTABLISHED
tcp        0    617 192.168.0.10:80         200.189.254.49:2122     FIN_WAIT1   
tcp        0      0 192.168.0.10:80         222.76.39.16:1336       TIME_WAIT   
tcp        0      0 192.168.0.10:80         222.81.148.40:3438      TIME_WAIT   
tcp        0      0 192.168.0.10:80         222.81.148.40:3437      TIME_WAIT   
tcp        0      0 192.168.0.10:80         222.81.148.40:3436      TIME_WAIT   
tcp        0    617 192.168.0.10:80         200.158.222.58:1275     FIN_WAIT1   
tcp        0      0 192.168.0.10:80         68.226.137.9:3462       TIME_WAIT   
tcp        0      0 192.168.0.10:80         24.164.226.126:49107    TIME_WAIT   
tcp        0      0 192.168.0.10:80         24.164.226.126:40908    TIME_WAIT   
tcp        0    617 192.168.0.10:80         200.158.222.58:1357     FIN_WAIT1   
tcp        0    263 192.168.0.10:80         221.196.29.185:3222     FIN_WAIT1   
unix  2      [ ACC ]     STREAM     LISTENING     2265   /tmp/.gdm_socket
unix  2      [ ACC ]     STREAM     LISTENING     1522   /dev/gpmctl
unix  2      [ ACC ]     STREAM     LISTENING     2275   /tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     2291   /tmp/.font-unix/fs7100
unix  3      [ ]         STREAM     CONNECTED     2290   
unix  4      [ ]         STREAM     CONNECTED     2293   /tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     2278   
unix  2      [ ]         DGRAM                    2256

牙齿晒太阳

[quote]原帖由 "wallace888"]到底现在情况如何了哟，大家都来关注一下！帮助牙齿把问题解决了！[/quote 发表：


hehe 兄弟你来了阿！ :em11:  :em11: