gouera
V2EX  ›  服务器

怎么每天都有一些人来试着暴力破解ROOT密码..

  •  
  •   gouera · Nov 26, 2013 · 6208 views
    This topic created in 4725 days ago, the information mentioned may be changed or developed.
    Nov 26 07:26:50 localhost sshd[7692]: User root from 219.243.208.158 not allowed because not listed in AllowUsers
    Nov 26 07:26:50 localhost sshd[7693]: input_userauth_request: invalid user root
    Nov 26 07:26:51 localhost sshd[7693]: Received disconnect from 219.243.208.158: 11: Bye Bye
    Nov 26 07:26:52 localhost sshd[7694]: User root from 219.243.208.158 not allowed because not listed in AllowUsers
    Nov 26 07:26:52 localhost sshd[7695]: input_userauth_request: invalid user root
    Nov 26 07:26:52 localhost sshd[7695]: Received disconnect from 219.243.208.158: 11: Bye Bye
    Nov 26 07:26:52 localhost sshd[7696]: User root from 219.243.208.158 not allowed because not listed in AllowUsers
    Nov 26 07:26:52 localhost sshd[7697]: input_userauth_request: invalid user root
    Nov 26 07:26:52 localhost sshd[7697]: Received disconnect from 219.243.208.158: 11: Bye Bye
    Nov 26 07:26:53 localhost sshd[7698]: User root from 219.243.208.158 not allowed because not listed in AllowUsers

    这些人是闲着蛋疼吗? 我的2台服务器都会这样。
    12 replies  •  1970-01-01 08:00:00 +08:00
    DearMark
    DearMark
    Nov 26, 2013 via Android
    1
    对,蛋疼
    subpo
    subpo
    Nov 26, 2013
    2
    正常,脚本小子多的是
    gouera
    gouera
    OP
    Nov 26, 2013
    3
    @subpo 这个是怎么回事啊。 写个脚本在广域网扫端口,然后暴力破解?
    ultragtx
    ultragtx
    Nov 26, 2013
    4
    把root的远程登陆关了啊 ssh端口改了啊
    qdvictory
    qdvictory
    Nov 26, 2013❤️1
    5
    ssh关root- -
    yylzcom
    yylzcom
    Nov 26, 2013 via Android
    6
    脚本泛滥的后果啊
    subpo
    subpo
    Nov 26, 2013
    7
    @gouera vps商的ip段基本上算是公开的吧,直接弱密码扫ip段就行了,我小时候就干过这样的事情- -一个软件,一天能扫出一堆,不过不明觉厉,不知道用来干嘛。
    现在想想,啧。
    GordianZ
    GordianZ
    Nov 26, 2013
    8
    Fail2ban is your friend.
    hadoop
    hadoop
    Nov 26, 2013
    9
    denyhost也不错啊,简单方便

    其实直接禁止密码登陆更彻底
    princeofwales
    princeofwales
    Nov 26, 2013
    10
    我把ssh的端口改成443了,然后禁止密码登录
    gouera
    gouera
    OP
    Nov 26, 2013
    11
    @hadoop
    @princeofwales
    我知道啊,早就禁止root用户和密码登录了, 现在都是用密钥对登录的。 只是好奇他们的目的,难道真的是扫来做肉鸡吗
    hadoop
    hadoop
    Nov 26, 2013
    12
    @gouera 他们有机器自动扫ip,成本非常低,几万台能搞到一台就赚了啊
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Privacy   ·   Solana   ·   2644 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 34ms · UTC 15:14 · PVG 23:14 · LAX 07:14 · JFK 10:14
    ♥ Do have faith in what you're doing.