Linux : lastb 很多访问记录，是有人在 attack 吗？

This topic created in 2723 days ago, the information mentioned may be changed or developed.

 ~> ls -lAhpv /var/log/*tmp*
-rw------- 1 root utmp 2.3K May 29 19:33 /var/log/btmp
-rw------- 1 root utmp  18M May  1 06:15 /var/log/btmp.1
-rw-rw-r-- 1 root utmp    1 May 29 19:33 /var/log/wtmp
-rw-rw-r-- 1 root utmp  87K Apr 30 17:12 /var/log/wtmp.1

 ~> sudo lastb|wc -l
24654

 ~> sudo lastb
ftpuser  ssh:notty    170.79.148.12    Wed May 29 19:34 - 19:34  (00:00)
ftpuser  ssh:notty    170.79.148.12    Wed May 29 19:34 - 19:34  (00:00)
robert   ssh:notty    134.175.184.238  Wed May 29 19:34 - 19:34  (00:00)
robert   ssh:notty    134.175.184.238  Wed May 29 19:34 - 19:34  (00:00)
art      ssh:notty    121.184.64.15    Wed May 29 19:34 - 19:34  (00:00)
art      ssh:notty    121.184.64.15    Wed May 29 19:34 - 19:34  (00:00)
office   ssh:notty    128.199.83.103   Wed May 29 19:33 - 19:33  (00:00)
office   ssh:notty    128.199.83.103   Wed May 29 19:33 - 19:33  (00:00)
postgres ssh:notty    179.189.235.228  Wed May 29 19:32 - 19:32  (00:00)
postgres ssh:notty    179.189.235.228  Wed May 29 19:32 - 19:32  (00:00)
diana    ssh:notty    180.250.18.197   Wed May 29 19:31 - 19:31  (00:00)
diana    ssh:notty    180.250.18.197   Wed May 29 19:31 - 19:31  (00:00)

Wed

notty

ssh

May

4 replies • 2019-05-29 23:18:56 +08:00