连接问题

1
2
3
4
Socket error Event: 32 Error: 10053.
Connection closing...Socket close.

Connection closed by foreign host.

用手机连热点遇到的问题

推测不是负载过高导致的

端口:22,用手机和电脑上xshell连接有问题

刚进的时候可以,但是输入两到三行命令后会突然退出显示以上报错

排除xshell问题,因为手机端也不能正常连接

猜想排除网络问题,因为用4g网络,5g网络,wifi,都会出现以上情况

不是ip冲突导致的

输入last命令后

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
Last login: Wed Jun 26 00:23:36 2024 from 223.104.40.248
stydent@nihao:~$ last
stydent pts/0 223.104.40.248 Wed Jun 26 00:30 still logged in
stydent pts/0 223.104.40.248 Wed Jun 26 00:23 - 00:24 (00:00)
stydent pts/0 223.104.40.248 Wed Jun 26 00:16 - 00:17 (00:00)
stydent pts/0 223.104.40.248 Wed Jun 26 00:09 - 00:10 (00:00)
stydent pts/0 223.104.40.248 Wed Jun 26 00:02 - 00:03 (00:00)
stydent pts/0 120.244.62.97 Tue Jun 25 23:20 - 23:21 (00:00)
stydent pts/0 223.104.40.248 Tue Jun 25 16:23 - 16:32 (00:09)
stydent pts/1 223.104.40.248 Tue Jun 25 16:16 - 16:25 (00:08)
stydent pts/0 223.104.40.248 Tue Jun 25 16:10 - 16:19 (00:08)
stydent pts/0 223.104.40.248 Tue Jun 25 16:02 - 16:09 (00:06)
stydent pts/0 223.104.40.248 Tue Jun 25 15:55 - 15:58 (00:03)
stydent pts/2 223.104.40.248 Tue Jun 25 15:32 - 15:46 (00:14)
stydent pts/1 120.244.62.221 Tue Jun 25 14:56 - 15:38 (00:42)
stydent pts/0 120.244.62.221 Tue Jun 25 14:55 - 15:36 (00:40)
reboot system boot 5.15.0-1064-azur Tue Jun 25 14:53 still running

更换ip后依然不行,停止后重启暂时修复

启动机器人后突然挂掉,应该是负载问题

真相了

连接校园网就没问题

应该是手机热点导致的ip冲突

彻底真相了

1
lastb

随便截取一些记录

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
user     ssh:notty    43.134.171.154   Tue Jun 25 16:03 - 16:03  (00:00)
user ssh:notty 43.134.171.154 Tue Jun 25 16:03 - 16:03 (00:00)
root ssh:notty 43.163.200.19 Tue Jun 25 16:03 - 16:03 (00:00)
oracle ssh:notty 43.163.247.189 Tue Jun 25 16:03 - 16:03 (00:00)
oracle ssh:notty 43.163.247.189 Tue Jun 25 16:02 - 16:02 (00:00)
root ssh:notty 105.28.108.165 Tue Jun 25 16:02 - 16:02 (00:00)
daniel ssh:notty 201.234.7.122 Tue Jun 25 16:02 - 16:02 (00:00)
daniel ssh:notty 201.234.7.122 Tue Jun 25 16:02 - 16:02 (00:00)
test ssh:notty 43.134.171.154 Tue Jun 25 16:02 - 16:02 (00:00)
test ssh:notty 43.134.171.154 Tue Jun 25 16:02 - 16:02 (00:00)
root ssh:notty 43.163.200.19 Tue Jun 25 16:02 - 16:02 (00:00)
daniel ssh:notty 43.163.247.189 Tue Jun 25 16:02 - 16:02 (00:00)
daniel ssh:notty 43.163.247.189 Tue Jun 25 16:02 - 16:02 (00:00)
ubuntu ssh:notty 43.163.200.19 Tue Jun 25 16:01 - 16:01 (00:00)
root ssh:notty 201.234.7.122 Tue Jun 25 16:01 - 16:01 (00:00)
root ssh:notty 105.28.108.165 Tue Jun 25 16:01 - 16:01 (00:00)
ubuntu ssh:notty 43.163.200.19 Tue Jun 25 16:01 - 16:01 (00:00)
root ssh:notty 43.134.171.154 Tue Jun 25 16:01 - 16:01 (00:00)
root ssh:notty 43.163.247.189 Tue Jun 25 16:01 - 16:01 (00:00)
root ssh:notty 43.163.200.19 Tue Jun 25 16:00 - 16:00 (00:00)
root ssh:notty 43.134.171.154 Tue Jun 25 16:00 - 16:00 (00:00)
root ssh:notty 201.234.7.122 Tue Jun 25 16:00 - 16:00 (00:00)
root ssh:notty 43.163.247.189 Tue Jun 25 15:59 - 15:59 (00:00)
root ssh:notty 105.28.108.165 Tue Jun 25 15:59 - 15:59 (00:00)
root ssh:notty 140.246.109.211 Tue Jun 25 15:57 - 15:57 (00:00)
Admin ssh:notty 43.163.200.19 Tue Jun 25 15:56 - 15:56 (00:00)

看1panel的ssh登录日志,发现有两千多条和我无关的ip尝试登录,估计是被挤占的

linux问题解决:多种方法处理ssh暴力攻击_sshd:all:deny-CSDN博客