1以前没见过thank you for playing这种日志
2stopping似乎是手工关闭的吧
【 在 hgoldfish (老鱼) 的大作中提到: 】
: 这今天看 systemd-journal 日志，看到 sshd 在不断重启？是被攻击了吧？
: Apr 05 22:05:04 xxxxxxxxx sshd[27233]: Received disconnect from 68.183.10.8 port 50736:11: Normal Shutdown, Thank you for playing [preauth]
: Apr 05 22:05:04 xxxxxxxxx sshd[27233]: Disconnected from authenticating user postgres 68.183.10.8 port 50736 [preauth]
: ...................
--
FROM 113.89.11.*