日志里各种sshd[xxxx]: Invalid user USERNAME from x.x.x.x ，用户名还有gitolite, gitosis, 什么情况？

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

For Existing Member Sign In

Distributions

› Ubuntu

› Fedora

› CentOS

中文资源站

› 网易开源镜像站

This topic created in 4486 days ago, the information mentioned may be changed or developed.

每分钟都有一条日志，每个用户名都摘取几条，这些都是企图暴力登录的日志？

Jan 14 09:19:32 linode-gentoo sshd[13280]: Invalid user gitolite from 91.121.203.75
Jan 14 09:20:32 linode-gentoo sshd[13418]: Invalid user gitolite from 91.121.203.75
Jan 14 09:21:37 linode-gentoo sshd[13593]: Invalid user gitolite from 91.121.203.75
Jan 14 09:28:06 linode-gentoo sshd[14601]: Invalid user gitosis from 91.121.203.75
Jan 14 09:29:17 linode-gentoo sshd[14783]: Invalid user gitosis from 91.121.203.75
Jan 14 09:30:12 linode-gentoo sshd[14966]: Invalid user gitosis from 91.121.203.75
Jan 14 11:32:19 linode-gentoo sshd[2620]: Invalid user a from 77.40.50.146
Jan 14 11:32:38 linode-gentoo sshd[2664]: Invalid user jenkins from 91.121.203.75
Jan 14 11:33:44 linode-gentoo sshd[2839]: Invalid user jenkins from 91.121.203.75
Jan 14 11:34:46 linode-gentoo sshd[3004]: Invalid user jenkins from 91.121.203.75
Jan 14 12:45:24 linode-gentoo sshd[15406]: Invalid user jira from 91.121.203.75
Jan 14 12:46:34 linode-gentoo sshd[15583]: Invalid user jira from 91.121.203.75
Jan 14 12:47:35 linode-gentoo sshd[15755]: Invalid user jira from 91.121.203.75

本地用git init --bare example.git 的简单方式搭建了几个git仓库，用户用git
git:x:1005:1005::/home/git:/usr/bin/git-shell
使用了 git-shell，禁止密码登录了，还加了相关规则，安全上应该能做的都做了，.
(详细见我以前总结的 http://tech.wutianqi.com/blog/2013/12/21/set-up-a-private-git-server-simply/ )

看监听端口也只有sshd, nginx, sendmail的端口，很好奇为啥会吸引别人来尝试用户gitolite， gitosis 这些来尝试登录？难道还能扫描到我系统里有git仓库？

sshd

user

invalid

4 replies • 1970-01-01 08:00:00 +08:00