: 학교서버에 누가 자꾸 접속할려고 하는 것 같은데....
: 뭘 잘 몰라서리...
: ip확인해보니 대만 쪽이던데....(210.68.230.225)
: 영 찜찜하기도 하고, 어찌해야 될 지....
: 부탁합니다.
:
: Jan 28 15:48:05 edu telnetd[20948]: ttloop: peer died:
EOF
: Jan 28 15:48:05 edu inetd[511]: pid 20948: exit status
1
: Jan 28 15:48:17 edu telnetd[20963]: ttloop: read:
Connection reset by peer
: Jan 28 15:48:17 edu inetd[511]: pid 20963: exit status
1
: Jan 28 15:48:17 edu fingerd[20966]: Client hung up -
probable port-scan
: Jan 28 15:48:17 edu inetd[511]: pid 20966: exit status
1
: Jan 28 15:48:18 edu ftpd[20961]: FTP session
closed
: Jan 28 15:48:23 edu ftpd[20969]: FTP LOGIN REFUSED (ftp
in /etc/ftpusers) FROM 210.68.230.225 [210.68.230.225],
: Jan 28 15:48:28 edu telnetd[20950]: ttloop: peer died:
EOF
: Jan 28 15:48:28 edu inetd[511]: pid 20950: exit status
1
: Jan 28 15:48:29 edu ftpd[20969]: lost connection to
210.68.230.225 [210.68.230.225]
: Jan 28 15:48:29 edu ftpd[20969]: FTP session
closed
: Jan 28 15:48:29 edu inetd[511]: pid 20969: exit status
255
: Jan 28 15:48:29 edu ftpd[20968]: lost connection to
210.68.230.225 [210.68.230.225]
: Jan 28 15:48:29 edu ftpd[20968]: FTP session
closed
: Jan 28 15:48:29 edu inetd[511]: pid 20968: exit status
255
: Jan 28 15:48:36 edu PAM_pwdb[20976]: check pass; user
unknown
: Jan 28 15:48:36 edu ftpd: 210.68.230.225: connected:
IDLE
: Jan 28 15:48:39 edu PAM_pwdb[20985]: check pass; user
unknown
: Jan 28 15:48:40 edu ftpd: 210.68.230.225: connected:
IDLE
: Jan 28 15:48:41 edu PAM_pwdb[20979]: authentication
failure; (uid=0) -> admin for ftp service
: Jan 28 15:48:42 edu ftpd: 210.68.230.225: connected:
IDLE
: Jan 28 15:48:42 edu PAM_pwdb[20986]: check pass; user
unknown
: Jan 28 15:48:42 edu PAM_pwdb[20988]: check pass; user
unknown
: Jan 28 15:48:42 edu PAM_pwdb[20977]: check pass; user
unknown
: Jan 28 15:48:42 edu ftpd[20997]: FTP session
closed
: Jan 28 15:48:43 edu ftpd: 210.68.230.225: connected:
IDLE
: Jan 28 15:48:43 edu ftpd: 210.68.230.225: connected:
IDLE
: Jan 28 15:48:43 edu ftpd: 210.68.230.225: connected:
IDLE
: Jan 28 15:48:43 edu PAM_pwdb[20985]: check pass; user
unknown
: Jan 28 15:48:43 edu PAM_pwdb[20982]: check pass; user
unknown
: Jan 28 15:48:44 edu PAM_pwdb[20984]: check pass; user
unknown
: Jan 28 15:48:44 edu PAM_pwdb[20992]: check pass; user
unknown
: Jan 28 15:48:44 edu PAM_pwdb[20979]: authentication
failure; (uid=0) -> admin for ftp service
: Jan 28 15:48:44 edu ftpd: 210.68.230.225: connected:
IDLE
: Jan 28 15:48:44 edu ftpd: 210.68.230.225: connected:
IDLE
: Jan 28 15:48:45 edu ftpd: 210.68.230.225: connected:
IDLE
: Jan 28 15:48:45 edu ftpd: 210.68.230.225: connected:
IDLE
: Jan 28 15:48:45 edu PAM_pwdb[20998]: authentication
failure; (uid=0) -> test for ftp service
: Jan 28 15:48:45 edu ftpd: 210.68.230.225: connected:
IDLE
: Jan 28 15:48:45 edu ftpd[20995]: PAM-listfile: Refused user
root for service ftp
: Jan 28 15:48:45 edu PAM_pwdb[20995]: authentication
failure; (uid=0) -> root for ftp service
: Jan 28 15:48:46 edu PAM_pwdb[20990]: authentication
failure; (uid=0) -> test for ftp service
: Jan 28 15:48:46 edu PAM_pwdb[20986]: check pass; user
unknown
: Jan 28 15:48:46 edu PAM_pwdb[20988]: check pass; user
unknown
: Jan 28 15:48:46 edu ftpd: 210.68.230.225: connected:
IDLE
: Jan 28 15:48:46 edu PAM_pwdb[20989]: check pass; user
unknown
: Jan 28 15:48:47 edu ftpd: 210.68.230.225: connected:
IDLE
: Jan 28 15:48:47 edu PAM_pwdb[20987]: check pass; user
unknown
: Jan 28 15:48:47 edu ftpd: 210.68.230.225: connected:
IDLE
: Jan 28 15:48:47 edu ftpd: 210.68.230.225: connected:
IDLE
: Jan 28 15:48:47 edu ftpd: 210.68.230.225: connected: IDLE
:
: --
: 삽질은 계속 되어야 한다.
/etc/hosts.deny에서 그쪽아이피 등록해 주면 됩니다.--변화,극복,헌신