这是一个创建于 3997 天前的主题，其中的信息可能已经有所发展或是发生改变。
Nov 26 07:26:50 localhost sshd[7692]: User root from 219.243.208.158 not allowed because not listed in AllowUsers
Nov 26 07:26:50 localhost sshd[7693]: input_userauth_request: invalid user root
Nov 26 07:26:51 localhost sshd[7693]: Received disconnect from 219.243.208.158: 11: Bye Bye
Nov 26 07:26:52 localhost sshd[7694]: User root from 219.243.208.158 not allowed because not listed in AllowUsers
Nov 26 07:26:52 localhost sshd[7695]: input_userauth_request: invalid user root
Nov 26 07:26:52 localhost sshd[7695]: Received disconnect from 219.243.208.158: 11: Bye Bye
Nov 26 07:26:52 localhost sshd[7696]: User root from 219.243.208.158 not allowed because not listed in AllowUsers
Nov 26 07:26:52 localhost sshd[7697]: input_userauth_request: invalid user root
Nov 26 07:26:52 localhost sshd[7697]: Received disconnect from 219.243.208.158: 11: Bye Bye
Nov 26 07:26:53 localhost sshd[7698]: User root from 219.243.208.158 not allowed because not listed in AllowUsers
这些人是闲着蛋疼吗？ 我的2台服务器都会这样。
Nov 26 07:26:50 localhost sshd[7693]: input_userauth_request: invalid user root
Nov 26 07:26:51 localhost sshd[7693]: Received disconnect from 219.243.208.158: 11: Bye Bye
Nov 26 07:26:52 localhost sshd[7694]: User root from 219.243.208.158 not allowed because not listed in AllowUsers
Nov 26 07:26:52 localhost sshd[7695]: input_userauth_request: invalid user root
Nov 26 07:26:52 localhost sshd[7695]: Received disconnect from 219.243.208.158: 11: Bye Bye
Nov 26 07:26:52 localhost sshd[7696]: User root from 219.243.208.158 not allowed because not listed in AllowUsers
Nov 26 07:26:52 localhost sshd[7697]: input_userauth_request: invalid user root
Nov 26 07:26:52 localhost sshd[7697]: Received disconnect from 219.243.208.158: 11: Bye Bye
Nov 26 07:26:53 localhost sshd[7698]: User root from 219.243.208.158 not allowed because not listed in AllowUsers
这些人是闲着蛋疼吗？ 我的2台服务器都会这样。
 |
1
DearMark 2013-11-26 10:11:39 +08:00 via Android
对，蛋疼
|
 |
2
subpo 2013-11-26 10:14:12 +08:00
正常，脚本小子多的是
|
 |
4
ultragtx 2013-11-26 10:45:25 +08:00
把root的远程登陆关了啊 ssh端口改了啊
|
 |
5
qdvictory 2013-11-26 10:50:53 +08:00  1
ssh关root－ －
|
 |
6
yylzcom 2013-11-26 10:57:00 +08:00 via Android
脚本泛滥的后果啊
|
|
7
subpo 2013-11-26 11:13:54 +08:00
@gouera vps商的ip段基本上算是公开的吧，直接弱密码扫ip段就行了，我小时候就干过这样的事情- -一个软件，一天能扫出一堆，不过不明觉厉，不知道用来干嘛。
现在想想，啧。 |
 |
8
GordianZ MOD Fail2ban is your friend.
|
 |
9
hadoop 2013-11-26 11:48:45 +08:00
denyhost也不错啊，简单方便
其实直接禁止密码登陆更彻底 |
 |
10
princeofwales 2013-11-26 12:07:49 +08:00
我把ssh的端口改成443了，然后禁止密码登录
|
 |
11
gouera OP |
Select Language