1
jamesxu 2014-10-24 11:15:24 +08:00
以后利用公钥登录,把密码登录关掉
可以查看 shell 的 history 命令,看看他干了些啥,如果他比较有经验,就会抹掉一些操作痕迹,如果真的不放心,重装 vps 好了 |
2
yangqi 2014-10-24 11:19:09 +08:00 1
{
as: "AS4565 MegaPath Networks Inc.", city: "Baldwin Park", country: "United States", countryCode: "US", isp: "Assured Home Financial", lat: 34.0964, lon: -117.9668, org: "Assured Home Financial", query: "69.33.249.194", region: "CA", regionName: "California", status: "success", timezone: "America/Los_Angeles", zip: "91706" } %rwhois V-1.5:003eff:00 siberia.megapath.net (by Network Solutions, Inc. V-1.5.7.3) network:Class-Name:network network:ID:NET-69.33.249.192/28 network:Auth-Area:69.33.0.0/16 network:Network-Name:69.33.249.192/28-2260319 network:IP-Network:69.33.249.192/28 network:Organization;I:Assured Home Financial network:Organization-Address;I:151 Kalmus Dr network:Organization-Address;I:Costa Mesa, CA 92626 network:Admin-Contact;I:[email protected] network:Abuse-Contact;I:[email protected] network:Created:20120622 network:Updated:20120622 network:Updated-By:[email protected] |
3
xpclassical OP @yangqi 感谢,不过这些信息是在哪查的?能分析出啥东西?很多看不懂
|
4
yangqi 2014-10-24 11:43:10 +08:00
|
5
jamesxu 2014-10-24 11:46:58 +08:00
@xpclassical 你追踪 IP 没用的,不见得就是入侵者的真实 IP,你要检查他在你机器上干了啥才是真的
|