绿云最近总是被反复suspended？

ptso

具体原因如下：

Feb 29 00:01:21 syslog sshd[27565]: Failed password for invalid user hao from 43.***.***.*** port 49456 ssh2 Feb 29 00:03:23 syslog sshd[27595]: Failed password for invalid user blade from 43.***.***.*** port 19158 ssh2 Feb 29 00:05:23 syslog sshd[27616]: Failed password for invalid user shiml from 43.***.***.*** port 52550 ssh2 Feb 29 00:07:33 syslog sshd[27643]: Failed password for invalid user zhengyandong from 43.***.***.*** port 49066 ssh2 Feb 29 00:09:38 syslog sshd[27669]: Failed password for invalid user ohan from 43.***.***.*** port 2864 ssh2 Feb 29 00:11:42 syslog sshd[27701]: Failed password for invalid user prod from 43.***.***.*** port 49556 ssh2 Feb 29 00:13:45 syslog sshd[27739]: Failed password for invalid user zqj from 43.***.***.*** port 38474 ssh2 Feb 29 00:15:47 syslog sshd[27764]: Failed password for invalid user spotligh from 43.***.***.*** port 56194 ssh2 Feb 29 00:17:51 syslog sshd[27791]: Failed password for invalid user xydkdev from 43.***.***.*** port 21426 ssh2 Feb 29 00:19:53 syslog sshd[27836]: Failed password for invalid user root from 43.***.***.*** port 60298 ssh2 Feb 29 00:21:57 syslog sshd[27904]: Failed password for invalid user root from 43.***.***.*** port 9840 ssh2 Feb 29 00:23:57 syslog sshd[28007]: Failed password for invalid user pwdi from 43.***.***.*** port 28016 ssh2 Feb 29 00:26:03 syslog sshd[28035]: Failed password for invalid user zhaojiabei from 43.***.***.*** port 38454 ssh2 Feb 29 00:28:08 syslog sshd[28067]: Failed password for invalid user baoyan from 43.***.***.*** port 41552 ssh2 Feb 29 00:30:08 syslog sshd[28122]: Failed password for invalid user dbgroup from 43.***.***.*** port 15938 ssh2 Feb 29 00:32:10 syslog sshd[28148]: Failed password for invalid user xintong from 43.***.***.*** port 7490 ssh2 Feb 29 00:34:13 syslog sshd[28172]: Failed password for invalid user root from 43.***.***.*** port 44386 ssh2 Feb 29 00:36:13 syslog sshd[28218]: Failed password for invalid user guest-nrbjoy from 43.***.***.*** port 19450 ssh2 Feb 29 00:38:14 syslog sshd[28251]: Failed password for invalid user contact from 43.***.***.*** port 27014 ssh2 Feb 29 00:40:17 syslog sshd[28302]: Failed password for invalid user liuyan from 43.***.***.*** port 34522 ssh2 Feb 29 00:42:18 syslog sshd[28332]: Failed password for invalid user loadrunner from 43.***.***.*** port 26758 ssh2 Feb 29 00:44:25 syslog sshd[28362]: Failed password for invalid user tangliu from 43.***.***.*** port 38022 ssh2 Feb 29 00:46:30 syslog sshd[28386]: Failed password for invalid user chonglin from 43.***.***.*** port 43458 ssh2 Feb 29 00:48:32 syslog sshd[28416]: Failed password for invalid user zcysky from 43.***.***.*** port 59640 ssh2
......

解释一下，43.***.***.***这个就是我vps的本机ip地址，为什么我会从本机尝试ssh2登陆本机？？？

我已经全部rebuild过了，重装了之后，怎么还是会出现这种情况？？？还要请教各位MJJ大佬

charliez0

挂代理然后有app反复尝试登录ssh？

jcfkccp

代理给别人用了？

ptso

没啊，自己用的，真特么见鬼了，而且rebuild过了，还这样，真要说难道是这个脚本？？？

wget -O tcp.sh "https://github.com/ylx2016/Linux-NetSpeed/raw/master/tcp.sh" && chmod +x tcp.sh && ./tcp.sh

应该没问题的吧

还装个x-ui，应该是大家都用的脚本，不会有问题
bash <(curl -Ls https://raw.githubusercontent.com/FranzKafkaYu/x-ui/master/install.sh)

haole

你往外扫才封你，你被扫不会封你，对着呢。

ptso

haole 发表于 2024-3-1 14:03
你往外扫才封你，你被扫不会封你，对着呢。

奇了怪了，都是他们的系统，除开上面2脚本，啥都没搞，说我外扫，莫非是绿云他们自己的linux有毒吧

ptso

haole 发表于 2024-3-1 14:03
你往外扫才封你，你被扫不会封你，对着呢。

而且已经是3次了，过完春节后，也就是我都重装2次了，

另外我其他vps（搬瓦工和rn）也装这俩脚本，一点事没有！！！

ptso

绿云搞啥JB鬼

haole

ptso 发表于 2024-3-1 14:10
而且已经是3次了，过完春节后，也就是我都重装2次了，

另外我其他vps（搬瓦工和rn）也装这俩脚本，一点 ...

默认的版本也要开起安全策略，或者你架设的程序有漏洞。

我上次对外扫描给停机了，当时我还言之凿凿的说我没扫，等给我解封之后，我仔细查看，确实是我用的xampp存在一个漏洞，被人上传了程序，对外扫描了。