222.186.15.26 是什么鬼，一直在 SSH 我的 VPS，十几万次尝试了

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

现在注册

已注册用户请登录

通过以下 Referral 链接购买 DigitalOcean 主机，你将可以帮助 V2EX 持续发展

这是一个创建于 2426 天前的主题，其中的信息可能已经有所发展或是发生改变。

买了台辣鸡 vps 放着没用，今天登上一看吓一跳，有十几万次失败尝试，全是来自这个镇江的 IP。

Mar 18 06:27:17 localhost sshd[20352]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.26 user=root Mar 18 06:27:17 localhost sshd[20352]: PAM service(sshd) ignoring max retries; 6 > 3 Mar 18 06:27:20 localhost sshd[25594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.26 user=root Mar 18 06:27:22 localhost sshd[25594]: Failed password for root from 222.186.15.26 port 50728 ssh2 Mar 18 06:27:25 localhost sshd[25594]: Failed password for root from 222.186.15.26 port 50728 ssh2 Mar 18 06:27:27 localhost sshd[25594]: Failed password for root from 222.186.15.26 port 50728 ssh2 Mar 18 06:27:29 localhost sshd[25594]: Failed password for root from 222.186.15.26 port 50728 ssh2 Mar 18 06:27:32 localhost sshd[25594]: Failed password for root from 222.186.15.26 port 50728 ssh2 Mar 18 06:27:35 localhost sshd[25594]: Failed password for root from 222.186.15.26 port 50728 ssh2 Mar 18 06:27:35 localhost sshd[25594]: Disconnecting: Too many authentication failures for root [preauth] Mar 18 06:27:35 localhost sshd[25594]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.26 user=root Mar 18 06:27:35 localhost sshd[25594]: PAM service(sshd) ignoring max retries; 6 > 3 Mar 18 06:27:37 localhost sshd[30963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.26 user=root Mar 18 06:27:39 localhost sshd[30963]: Failed password for root from 222.186.15.26 port 56540 ssh2 Mar 18 06:27:42 localhost sshd[30963]: Failed password for root from 222.186.15.26 port 56540 ssh2 Mar 18 06:27:45 localhost sshd[30963]: Failed password for root from 222.186.15.26 port 56540 ssh2 Mar 18 06:27:48 localhost sshd[30963]: Failed password for root from 222.186.15.26 port 56540 ssh2 Mar 18 06:27:50 localhost sshd[30963]: Failed password for root from 222.186.15.26 port 56540 ssh2 Mar 18 06:27:52 localhost sshd[30963]: Failed password for root from 222.186.15.26 port 56540 ssh2 Mar 18 06:27:52 localhost sshd[30963]: Disconnecting: Too many authentication failures for root [preauth] Mar 18 06:27:52 localhost sshd[30963]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.26 user=root

随便 Copy 了一段出来。另外还有一个台湾友人(61.216.16.24)

3 条回复 • 2018-03-26 10:39:55 +08:00