Shulou(Shulou.com)06/01 Report--

The online machine has been violently cracked (it has just been integrated and has not had time to do security protection). Can ping the host but the service is killed telnet ip ssh (port) found not. Xshell, of course not. Ask for instructions on the quickest solution. The following is the whole process. First, inform the computer room to restart the machine. The ucloud management platform changes back to the original root password. Second, log in as quickly as possible (thank him for not messing around but changing the password and suspending the service. (thoroughly check the machine auth.log checked ip blew up the machine. After a rule w, kick it out and change the password first so that you don't log on to the machine again. Iptables-I INPUT-s 78.228.204.30-j DROP Chain INPUT (policy ACCEPT) target prot opt source destination DROP all-78.228.204.30 anywhere third, top ps-ef check whether there is a process (because it is real-time monitoring, the processing speed is fast (no horse found) as a result, the service failed to automatically pull up the script craotab that checked the alarm and restarted. The comment was removed. The mission plan is back to normal. Fourth, the easiest way for denyhosts fail2ban to do ssh protection. Let's start with this. I'm busy with the follow-up supplement. The work is done. Everything below is quiet top-12:18:19 up 1:25, 4 users, load average: 0.25,0.55, 0.71Tasks: 168total, 2 running, 166sleeping, 0 stopped, 0 zombieCpu0: 0.0%us, 0.0%sy, 0.0%ni, 94.7%id, 5.3%wa, 0.0%hi, 0.0%si, 0.0%stCpu1: 0.7%us, 0.3%sy 0.0%ni, 98.7%id, 0.3%wa, 0.0%hi, 0.0%si, 0.0%stCpu2: 0.3%us, 0.3%sy, 0.0%ni, 99.3%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%stCpu3: 0.3%us, 0.3%sy, 0.0%ni, 99.3%id, 0.0%wa 0.0%hi, 0.0%si, 0.0%stCpu4: 0.0%us, 0.0%sy, 0.0% NiMagol 100.0% id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%stCpu5: 0.0%us, 0.0%sy, 0.0% NiMagol 100.0% id, 0.0%wa, 0.0%hi, 0.0%si 0.0%stCpu6: 0.3%us, 0.0%sy, 0.0%ni, 99.7%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%stCpu7: 0.3%us, 0.0%sy, 0.0%ni, 99.7%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%stCpu8: 0.3%us 0.0%sy, 0.0%ni, 99.7%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%stCpu9: 3.3%us, 0.0%sy, 0.0%ni, 96.7%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%stCpu10: 0.3%us, 0.0%sy, 0.0%ni, 99.7%id 0.0%wa, 0.0%hi, 0.0%si, 0.0%stCpu11: 0.0%us, 0.0%sy, 0.0% Nijie 100.0% id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%stCpu12: 0.3%us, 0.0%sy, 0.0%ni, 99.7%id, 0.0%wa, 0.0%hi, 0.0%si 0.0%stCpu13: 0.0%us, 0.0%sy, 0.0% Nijie 100.0% id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%stCpu14: 0.0%us, 0.0%sy, 0.0% NiJie 100.0% id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%stCpu15: 0.0%us, 0.0%sy 0% Nijima 100.0% id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%stMem: 32817200k total, 22008188k used, 10809012k free, 242268k buffersSwap: 2095100k total, 0k used, 2095100k free, 9055020k cached

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.