오늘message로그화일확인결과
작성자 정보
- see 작성
- 작성일
컨텐츠 정보
- 1,458 조회
- 0 추천
- 목록
본문
오늘 message로그확인결과 root권한으로 접속하려는 의도가 보여지는게 보이는데
Apr 15 11:43:22 minbak sshd(pam_unix)[22060]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=211.98.72.11 user=root
Apr 15 11:43:36 minbak sshd(pam_unix)[22064]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=211.98.72.11 user=root
Apr 15 11:43:50 minbak sshd(pam_unix)[22067]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=211.98.72.11 user=root
Apr 15 11:44:05 minbak sshd(pam_unix)[22071]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=211.98.72.11 user=root
Apr 15 11:44:20 minbak sshd(pam_unix)[22076]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=211.98.72.11 user=root
Apr 15 14:20:44 minbak sshd(pam_unix)[24182]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=mercury.websitewelcome.com user=admin
Apr 15 14:20:48 minbak sshd(pam_unix)[24183]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=mercury.websitewelcome.com user=admin
Apr 15 14:20:54 minbak sshd(pam_unix)[24187]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=mercury.websitewelcome.com user=root
Apr 15 14:20:58 minbak sshd(pam_unix)[24188]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=mercury.websitewelcome.com user=root
Apr 15 14:21:02 minbak sshd(pam_unix)[24190]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=mercury.websitewelcome.com user=root
차단하고싶습니다..제발 어디를 손봐야 저아이피와 도메인을 차단할수있는지..
한수부탁합니다..ㅡㅜ
관련자료
-
이전
-
다음