Linux : lastb 很多访问记录，是有人在 attack 吗？
c4f36e5766583218 · 2019-05-29 19:38:40 +08:00 · 2138 次点击这是一个创建于 2035 天前的主题，其中的信息可能已经有所发展或是发生改变。
~> ls -lAhpv /var/log/*tmp*
-rw------- 1 root utmp 2.3K May 29 19:33 /var/log/btmp
-rw------- 1 root utmp 18M May 1 06:15 /var/log/btmp.1
-rw-rw-r-- 1 root utmp 1 May 29 19:33 /var/log/wtmp
-rw-rw-r-- 1 root utmp 87K Apr 30 17:12 /var/log/wtmp.1
~> sudo lastb|wc -l
24654
~> sudo lastb
ftpuser ssh:notty 170.79.148.12 Wed May 29 19:34 - 19:34 (00:00)
ftpuser ssh:notty 170.79.148.12 Wed May 29 19:34 - 19:34 (00:00)
robert ssh:notty 134.175.184.238 Wed May 29 19:34 - 19:34 (00:00)
robert ssh:notty 134.175.184.238 Wed May 29 19:34 - 19:34 (00:00)
art ssh:notty 121.184.64.15 Wed May 29 19:34 - 19:34 (00:00)
art ssh:notty 121.184.64.15 Wed May 29 19:34 - 19:34 (00:00)
office ssh:notty 128.199.83.103 Wed May 29 19:33 - 19:33 (00:00)
office ssh:notty 128.199.83.103 Wed May 29 19:33 - 19:33 (00:00)
postgres ssh:notty 179.189.235.228 Wed May 29 19:32 - 19:32 (00:00)
postgres ssh:notty 179.189.235.228 Wed May 29 19:32 - 19:32 (00:00)
diana ssh:notty 180.250.18.197 Wed May 29 19:31 - 19:31 (00:00)
diana ssh:notty 180.250.18.197 Wed May 29 19:31 - 19:31 (00:00)
 |
1
ifaii 2019-05-29 21:31:39 +08:00 via iPhone
在公网很正常，没人针对你，都是常规操作
|
 |
2
enfuss 2019-05-29 22:13:17 +08:00
不是一直一个 IP 就是常规操作，装个 fail2ban 完事
|
 |
3
malusama 2019-05-29 22:49:47 +08:00  1
欢迎来到互联网
|
 |
4
c4f36e5766583218 OP @malusama #3 real???
|
Select Language