2024-11-14T15:52:54.295408+09:00 livflow sshd[2058]: Connection closed by invalid user jekim 203.246.113.63 port 38200 [preauth]
2024-11-14T15:53:00.329058+09:00 livflow sshd[2060]: Invalid user ubuntu from 203.246.113.63 port 47514
2024-11-14T15:53:00.335391+09:00 livflow sshd[2060]: Connection closed by invalid user ubuntu 203.246.113.63 port 47514 [preauth]
2024-11-14T15:53:05.986108+09:00 livflow sshd[2130]: Invalid user quylm from 203.246.113.63 port 47522
2024-11-14T15:53:05.992276+09:00 livflow sshd[2130]: Connection closed by invalid user quylm 203.246.113.63 port 47522 [preauth]
2024-11-14T15:53:12.091687+09:00 livflow sshd[2618]: Invalid user test from 203.246.113.63 port 34378
2024-11-14T15:53:12.101667+09:00 livflow sshd[2618]: Connection closed by invalid user test 203.246.113.63 port 34378 [preauth]
2024-11-14T15:53:17.829762+09:00 livflow sshd[2911]: Invalid user vagrant from 203.246.113.63 port 34386
2024-11-14T15:53:17.844432+09:00 livflow sshd[2911]: Connection closed by invalid user vagrant 203.246.113.63 port 34386 [preauth]
2024-11-14T15:53:23.683355+09:00 livflow sshd[2968]: Invalid user jenkins from 203.246.113.63 port 36266
2024-11-14T15:53:23.696381+09:00 livflow sshd[2968]: Connection closed by invalid user jenkins 203.246.113.63 port 36266 [preauth]
2024-11-14T15:40:24.075410+09:00 livflow sshd[3633]: Invalid user demo from 203.246.113.63 port 57772
2024-11-14T15:40:24.082412+09:00 livflow sshd[3633]: pam_unix(sshd:auth): check pass; user unknown
2024-11-14T15:40:24.082472+09:00 livflow sshd[3633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.246.113.63
2024-11-14T15:40:26.722796+09:00 livflow sshd[3633]: Failed password for invalid user demo from 203.246.113.63 port 57772 ssh2
2024-11-14T15:40:27.070027+09:00 livflow sshd[3633]: Connection closed by invalid user demo 203.246.113.63 port 57772 [preauth]
2024-11-14T15:40:30.428144+09:00 livflow sshd[3635]: Invalid user cuongnd from 203.246.113.63 port 44096
2024-11-14T15:40:30.436843+09:00 livflow sshd[3635]: pam_unix(sshd:auth): check pass; user unknown
2024-11-14T15:40:30.436981+09:00 livflow sshd[3635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.246.113.63
2024-11-14T15:40:32.488752+09:00 livflow sshd[3635]: Failed password for invalid user cuongnd from 203.246.113.63 port 44096 ssh2
2024-11-14T15:40:32.912468+09:00 livflow sshd[3635]: Connection closed by invalid user cuongnd 203.246.113.63 port 44096 [preauth]
ssh 문제 고치는도중 이상한 접속기록이 지속되고있엇음
위치를 찾아보니 세종로 어디로 나오는데
무작위 포트와 무작위 이름을 대입하여 접속을 시도하고있었음
다행인점은 ip는 하나로 통일되서 오기 때문에 공유기에서 ip를 차단해버렸음
어떻게 접속했는지는 아직 의문인데
ssh까지 기록이 남는다는건 공인ip와 대강의 포트는 다 뚫고 들어왔다는 것이기 때문에 보안에 좀더 신경써야 할듯함
