Warning: file_get_contents(/data/phpspider/zhask/data//catemap/9/security/4.json): failed to open stream: No such file or directory in /data/phpspider/zhask/libs/function.php on line 167

Warning: Invalid argument supplied for foreach() in /data/phpspider/zhask/libs/tag.function.php on line 1116

Notice: Undefined index: in /data/phpspider/zhask/libs/function.php on line 180

Warning: array_chunk() expects parameter 1 to be array, null given in /data/phpspider/zhask/libs/function.php on line 181

Warning: file_get_contents(/data/phpspider/zhask/data//catemap/8/logging/2.json): failed to open stream: No such file or directory in /data/phpspider/zhask/libs/function.php on line 167

Warning: Invalid argument supplied for foreach() in /data/phpspider/zhask/libs/tag.function.php on line 1116

Notice: Undefined index: in /data/phpspider/zhask/libs/function.php on line 180

Warning: array_chunk() expects parameter 1 to be array, null given in /data/phpspider/zhask/libs/function.php on line 181
Security SSH haywire与登录尝试-Heartbleed?_Security_Logging_Ssh_Heartbleed Bug - Fatal编程技术网

Security SSH haywire与登录尝试-Heartbleed?

Security SSH haywire与登录尝试-Heartbleed?,security,logging,ssh,heartbleed-bug,Security,Logging,Ssh,Heartbleed Bug,最近在my(Snow Leopard)Mac Mini的/var/log/secure.log中看到: Feb 17 06:31:32 mini sshd[37945]: Invalid user charles from 220.248.31.177 Feb 17 06:31:34 mini sshd[37947]: Invalid user charlie from 220.248.31.177 Feb 17 06:31:37 mini sshd[37949]: In

最近在my(Snow Leopard)Mac Mini的
/var/log/secure.log中看到:

    Feb 17 06:31:32 mini sshd[37945]: Invalid user charles from 220.248.31.177
    Feb 17 06:31:34 mini sshd[37947]: Invalid user charlie from 220.248.31.177
    Feb 17 06:31:37 mini sshd[37949]: Invalid user charlotte from 220.248.31.177
    Feb 17 06:31:39 mini sshd[37951]: Invalid user chase from 220.248.31.177
    Feb 17 06:31:42 mini sshd[37953]: Invalid user cher from 220.248.31.177
    Feb 17 06:31:44 mini sshd[37955]: Invalid user chester from 220.248.31.177
    Feb 17 06:31:47 mini sshd[37957]: Invalid user chile from 220.248.31.177
    Feb 17 06:31:49 mini sshd[37959]: Invalid user chip from 220.248.31.177
还有一大堆这样的问题:

    Feb 17 13:55:23 mini sshd[43204]: Invalid user beth from 23.19.81.173
    Feb 17 13:55:23 mini sshd[43206]: in pam_sm_authenticate(): Failed to determine Kerberos principal name.
    Feb 17 13:55:23 mini sshd[43204]: error: PAM: authentication error for illegal user beth from 23.19.81.173 via 192.168.0.2
    Feb 17 13:55:23 mini sshd[43204]: Failed keyboard-interactive/pam for invalid user beth from 23.19.81.173 port 59508 ssh2
    Feb 17 13:55:29 mini sshd[43207]: reverse mapping checking getaddrinfo for 23.19.81.173.rdns.ubiquity.io [23.19.81.173] failed - POSSIBLE BREAK-IN ATTEMPT!
一切从2月6日左右开始,一直持续到2月20日,我发现了它并停用了路由器的端口22转发。这些尝试来自许多ip地址,中国、北美,天知道还有哪里(我没有全部检查),但是ups总是分组在长会话中,正如您在这里看到的。兆字节值。似乎没有任何成功登录的迹象——我有一个非标准用户名——但这里有一个让我担心的有趣部分

我只是费心检查日志,因为我无法登录到第二个帐户——密码已更改。我很沮丧,试图以root身份登录,但root密码也发生了变化。但是,我的常规用户登录密码(始终登录)没有更改

我修正了密码,不得不像往常一样单用户做root。其他一切似乎都很正常,但密码的更改让我非常担心。有人听说过这种事吗?有没有办法知道我是不是被黑了


非常感谢。

如果您的密码在您不知情的情况下在您的系统上更改了,而您是唯一有权访问的人,那么您可能已经受到了威胁。核武器和铺路