Linux : lastb 很多访问记录，是有人在 attack 吗？

[c4f36e5766583218]

 ~> ls -lAhpv /var/log/*tmp*
-rw------- 1 root utmp 2.3K May 29 19:33 /var/log/btmp
-rw------- 1 root utmp  18M May  1 06:15 /var/log/btmp.1
-rw-rw-r-- 1 root utmp    1 May 29 19:33 /var/log/wtmp
-rw-rw-r-- 1 root utmp  87K Apr 30 17:12 /var/log/wtmp.1

 ~> sudo lastb|wc -l
24654

 ~> sudo lastb
ftpuser  ssh:notty    170.79.148.12    Wed May 29 19:34 - 19:34  (00:00)
ftpuser  ssh:notty    170.79.148.12    Wed May 29 19:34 - 19:34  (00:00)
robert   ssh:notty    134.175.184.238  Wed May 29 19:34 - 19:34  (00:00)
robert   ssh:notty    134.175.184.238  Wed May 29 19:34 - 19:34  (00:00)
art      ssh:notty    121.184.64.15    Wed May 29 19:34 - 19:34  (00:00)
art      ssh:notty    121.184.64.15    Wed May 29 19:34 - 19:34  (00:00)
office   ssh:notty    128.199.83.103   Wed May 29 19:33 - 19:33  (00:00)
office   ssh:notty    128.199.83.103   Wed May 29 19:33 - 19:33  (00:00)
postgres ssh:notty    179.189.235.228  Wed May 29 19:32 - 19:32  (00:00)
postgres ssh:notty    179.189.235.228  Wed May 29 19:32 - 19:32  (00:00)
diana    ssh:notty    180.250.18.197   Wed May 29 19:31 - 19:31  (00:00)
diana    ssh:notty    180.250.18.197   Wed May 29 19:31 - 19:31  (00:00)

[ifaii]

在公网很正常，没人针对你，都是常规操作

[enfuss]

不是一直一个 IP 就是常规操作，装个 fail2ban 完事

[malusama]

欢迎来到互联网

[c4f36e5766583218]

@malusama #3 real???