话说怎么那么多扫密码的。。

zccyun

有一台新机密码测试阶段偷懒没有加防御，今天一看，好多sshd进程啊。。。。赶紧加了。还好密码比较复杂

每个机器都能收到好多扫密码的请求。。

dongdong.im

可怕

Edit

[root@~]# cat /var/log/secure|awk '/Failed/{print $(NF-3)}'|sort|uniq -c|awk '{print $2"="$1;}'
121.127.231.246=33
173.246.100.240=24
201.77.183.56=52
209.172.33.20=111
212.160.170.220=53
212.191.39.170=7
216.139.203.70=4
221.231.140.146=102
69.175.14.226=51
72.20.156.17=24
93.157.46.93=15
94.228.212.70=688

Edit

[root@LosAngeles ~]# cat /var/log/secure|awk '/Failed/{print $(NF-3)}'|sort|uniq -c|awk '{print $2"="$1;}'
114.255.41.88=3
119.188.7.202=2
124.232.146.221=24
210.71.232.229=1
211.161.46.101=11
218.108.33.37=177
219.132.14.197=25
222.173.30.139=3724
46.234.103.188=37
58.214.27.162=152
60.247.2.49=1
65.38.95.187=1
94.102.209.13=3

Captain

lixuguang.xy

195.87.191.55=30
202.112.31.17=660
219.159.77.89=198

superqdi

119.60.2.40=4495
123.4.170.77=1
202.102.112.148=69
218.61.128.134=1
220.181.152.196=6
38.102.23.12=40
62.76.189.39=47
救命

ziyo

空的vps...
103.4.12.168=24
112.78.131.173=12
118.98.75.42=2
119.10.114.184=1000
120.132.132.74=21
121.12.149.109=432
121.127.231.246=9
121.14.58.140=221
122.115.59.131=45
183.137.231.66=1
183.203.9.147=11
183.60.143.25=45
184.107.119.213=1
194.239.185.180=1
200.207.223.74=11
202.108.87.122=71
208.66.26.91=343
211.151.72.197=1158
213.165.165.130=19
218.15.33.20=61
218.61.202.191=45
218.74.116.104=45
219.235.228.67=150
221.239.81.4=102
222.58.151.68=9
38.76.0.203=168
58.215.187.15=30
58.51.95.75=8
60.10.12.108=15
61.138.131.187=325

有个就好

fail2ban

smollett

lixuguang.xy 发表于 2012-4-19 21:16
哎

采取措施吧