在我的安全日志文件secure里有人试图远程SSH登陆的记录,我找了那段DOWN机时间的日志,9点多钟DOWN掉的
Mar 16 09:16:53 wst sshd[643]: Server listening on 0.0.0.0 port 22.
Mar 16 09:17:22 wst xinetd[657]: START: sgi_fam pid=947 from=<no address>
Mar 16 12:58:02 wst sshd[4020]: Did not receive identification string from 208.35.104.59
Mar 16 13:04:37 wst sshd[4099]: Could not reverse map address 208.35.104.59.
Mar 16 13:04:38 wst sshd[4101]: Could not reverse map address 208.35.104.59.