질문&답변
클라우드/리눅스에 관한 질문과 답변을 주고 받는 곳입니다.
리눅스 분류

secure 로그파일에 이상이 있는건지 알고싶습니다!

작성자 정보

  • 왕초보보보 작성
  • 작성일

컨텐츠 정보

본문

Jul  9 12:20:57 svr1 xinetd[593]: START: ftp pid=20005 from=211.123.116.162
Jul  9 12:20:57 svr1 proftpd[20005]: svr1.test.com (211.123.116.162[211.123.116.162]) - USER administrateur: no such user found from 211.123.116.162 [211.123.116.162] to 210.114.175.174:21
Jul  9 12:20:57 svr1 proftpd[20005]: svr1.test.com (211.123.116.162[211.123.116.162]) - mod_delay/0.5: delaying for 68703 usecs
Jul  9 12:20:58 svr1 proftpd[20005]: svr1.test.com (211.123.116.162[211.123.116.162]) - mod_delay/0.5: delaying for 1000 usecs
Jul  9 12:20:58 svr1 proftpd[20005]: svr1.test.com (211.123.116.162[211.123.116.162]) - no such user 'administrateur'
Jul  9 12:20:58 svr1 proftpd[20005]: svr1.test.com (211.123.116.162[211.123.116.162]) - USER administrateur: no such user found from 211.123.116.162 [211.123.116.162] to 210.114.175.174:21
Jul  9 12:20:58 svr1 proftpd[20005]: svr1.test.com (211.123.116.162[211.123.116.162]) - mod_delay/0.5: delaying for 54179 usecs
Jul  9 12:20:58 svr1 proftpd[20005]: svr1.test.com (211.123.116.162[211.123.116.162]) - mod_delay/0.5: delaying for 862 usecs
Jul  9 12:20:58 svr1 proftpd[20005]: svr1.test.com (211.123.116.162[211.123.116.162]) - no such user 'administrateur'
Jul  9 12:20:58 svr1 proftpd[20005]: svr1.test.com (211.123.116.162[211.123.116.162]) - USER administrateur: no such user found from 211.123.116.162 [211.123.116.162] to 210.114.175.174:21
Jul  9 12:20:58 svr1 proftpd[20005]: svr1.test.com (211.123.116.162[211.123.116.162]) - Maximum login attempts (3) exceeded
Jul  9 12:20:58 svr1 proftpd[20005]: svr1.test.com (211.123.116.162[211.123.116.162]) - FTP session closed.
Jul  9 12:20:58 svr1 xinetd[593]: START: ftp pid=20007 from=211.123.116.162
Jul  9 12:20:59 svr1 proftpd[20007]: svr1.test.com (211.123.116.162[211.123.116.162]) - USER administrateur: no such user found from 211.123.116.162 [211.123.116.162] to 210.114.175.174:21
Jul  9 12:20:59 svr1 proftpd[20007]: svr1.test.com (211.123.116.162[211.123.116.162]) - mod_delay/0.5: delaying for 58001 usecs
Jul  9 12:20:59 svr1 proftpd[20007]: svr1.test.com (211.123.116.162[211.123.116.162]) - mod_delay/0.5: delaying for 1266 usecs
Jul  9 12:20:59 svr1 proftpd[20007]: svr1.test.com (211.123.116.162[211.123.116.162]) - no such user 'administrateur'
Jul  9 12:20:59 svr1 proftpd[20007]: svr1.test.com (211.123.116.162[211.123.116.162]) - USER administrateur: no such user found from 211.123.116.162 [211.123.116.162] to 210.114.175.174:21
Jul  9 12:20:59 svr1 proftpd[20007]: svr1.test.com (211.123.116.162[211.123.116.162]) - mod_delay/0.5: delaying for 118997 usecs
Jul  9 12:20:59 svr1 proftpd[20007]: svr1.test.com (211.123.116.162[211.123.116.162]) - mod_delay/0.5: delaying for 1149 usecs
Jul  9 12:21:00 svr1 proftpd[20007]: svr1.test.com (211.123.116.162[211.123.116.162]) - no such user 'administrator'
Jul  9 12:21:00 svr1 proftpd[20007]: svr1.test.com (211.123.116.162[211.123.116.162]) - USER administrator: no such user found from 211.123.116.162 [211.123.116.162] to 210.114.175.174:21
Jul  9 12:21:00 svr1 proftpd[20007]: svr1.test.com (211.123.116.162[211.123.116.162]) - Maximum login attempts (3) exceeded
Jul  9 12:21:00 svr1 proftpd[20007]: svr1.test.com (211.123.116.162[211.123.116.162]) - FTP session closed.
Jul  9 12:21:00 svr1 xinetd[593]: START: ftp pid=20009 from=211.123.116.162
Jul  9 12:21:01 svr1 proftpd[20009]: svr1.test.com (211.123.116.162[211.123.116.162]) - USER administrator: no such user found from 211.123.116.162 [211.123.116.162] to 210.114.175.174:21
Jul  9 12:21:01 svr1 proftpd[20009]: svr1.test.com (211.123.116.162[211.123.116.162]) - mod_delay/0.5: delaying for 510 usecs
Jul  9 12:21:01 svr1 proftpd[20009]: svr1.test.com (211.123.116.162[211.123.116.162]) - mod_delay/0.5: delaying for 994 usecs
Jul  9 12:21:01 svr1 proftpd[20009]: svr1.test.com (211.123.116.162[211.123.116.162]) - no such user 'administrator'
Jul  9 12:21:01 svr1 proftpd[20009]: svr1.test.com (211.123.116.162[211.123.116.162]) - USER administrator: no such user found from 211.123.116.162 [211.123.116.162] to 210.114.175.174:21
Jul  9 12:21:01 svr1 proftpd[20009]: svr1.test.com (211.123.116.162[211.123.116.162]) - mod_delay/0.5: delaying for 120 usecs
Jul  9 12:21:01 svr1 proftpd[20009]: svr1.test.com (211.123.116.162[211.123.116.162]) - mod_delay/0.5: delaying for 1230 usecs
Jul  9 12:21:01 svr1 proftpd[20009]: svr1.test.com (211.123.116.162[211.123.116.162]) - no such user 'administrator'
Jul  9 12:21:01 svr1 proftpd[20009]: svr1.test.com (211.123.116.162[211.123.116.162]) - USER administrator: no such user found from 211.123.116.162 [211.123.116.162] to 210.114.175.174:21
Jul  9 12:21:01 svr1 proftpd[20009]: svr1.test.com (211.123.116.162[211.123.116.162]) - Maximum login attempts (3) exceeded
Jul  9 12:21:01 svr1 proftpd[20009]: svr1.test.com (211.123.116.162[211.123.116.162]) - FTP session closed.
Jul  9 12:21:02 svr1 xinetd[593]: START: ftp pid=20011 from=211.123.116.162
Jul  9 12:21:02 svr1 proftpd[20011]: svr1.test.com (211.123.116.162[211.123.116.162]) - USER administrator: no such user found from 211.123.116.162 [211.123.116.162] to 210.114.175.174:21
Jul  9 12:21:02 svr1 proftpd[20011]: svr1.test.com (211.123.116.162[211.123.116.162]) - mod_delay/0.5: delaying for 98 usecs
Jul  9 12:21:02 svr1 proftpd[20011]: svr1.test.com (211.123.116.162[211.123.116.162]) - FTP session closed.
Jul  9 12:58:16 svr1 xinetd[593]: START: ssh pid=21934 from=211.229.208.148
Jul  9 13:02:31 svr1 xinetd[593]: START: ssh pid=22221 from=211.229.208.148
Jul  9 13:02:31 svr1 xinetd[593]: START: ssh pid=22223 from=211.229.208.148

secure 로그파일을 드여다 보던중 이런 부분이 있어서.. 무슨내용인지 잘 모르겠습니다 ㅡㅜ

문제되는게 없는건지.. 고수님들 조언좀부탁드립니다~

 

 


관련자료

댓글 1

최혁규님의 댓글

  • 최혁규
  • 작성일
ftp로 접속을해서 관리자로 로그인시도 인겉 같습니다만..

공지사항


뉴스광장


  • 현재 회원수 :  60,366 명
  • 현재 강좌수 :  37,037 개
  • 현재 접속자 :  231 명