不明白是怎么回事,刚买没多久的buyvm又被suspended了

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

已注册用户请登录

通过以下 Referral 链接购买 DigitalOcean 主机，你将可以帮助 V2EX 持续发展

这是一个创建于 4094 天前的主题，其中的信息可能已经有所发展或是发生改变。

his ticket is notification that your service with us (209.141.34.81) is now suspended for the following TOS/AUP infractions:

- Network Abuse

As this is your second offense, your service(s) have been suspended, and a TOS/AUP Violation Fine (Invoice 65421) added to your account. This invoice must be paid in full before the service will be restored. Upon payment of the invoice and reply to this ticket, your service will be reactivated, and you will have 4 hours to resolve this issue. Please be aware that further abuse past this time frame will constitute a third offense; resulting in complete account suspension, termination of the offending service, and a further TOS/AUP Violation Fine.

Logs of the abuse follow:

Feb 9 01:20:33 quince sshd[31508]: Invalid user oracle from 209.141.34.81
Feb 9 01:20:33 quince sshd[31508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.34.81
Feb 9 01:20:35 quince sshd[31508]: Failed password for invalid user oracle from 209.141.34.81 port 42889 ssh2
Feb 9 01:20:37 quince sshd[31510]: Invalid user oracle from 209.141.34.81
Feb 9 01:20:37 quince sshd[31510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.34.81
Feb 9 01:20:38 quince sshd[31510]: Failed password for invalid user oracle from 209.141.34.81 port 43323 ssh2
Feb 9 01:20:39 quince sshd[31512]: Invalid user test from 209.141.34.81
Feb 9 01:20:39 quince sshd[31512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.34.81
Feb 9 01:20:41 quince sshd[31512]: Failed password for invalid user test from 209.141.34.81 port 43678 ssh2
Feb 9 01:20:43 quince sshd[31516]: Invalid user user from 209.141.34.81
Feb 9 01:20:43 quince sshd[31516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.34.81
Feb 9 01:20:45 quince sshd[31516]: Failed password for invalid user user from 209.141.34.81 port 44070 ssh2
Feb 9 01:20:46 quince sshd[31522]: Invalid user www from 209.141.34.81
Feb 9 01:20:46 quince sshd[31522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.34.81
Feb 9 01:20:48 quince sshd[31522]: Failed password for invalid user www from 209.141.34.81 port 44531 ssh2
Feb 9 01:20:50 quince sshd[31534]: Invalid user msql from 209.141.34.81
Feb 9 01:20:50 quince sshd[31534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.34.81
Feb 9 01:20:51 quince sshd[31534]: Failed password for invalid user msql from 209.141.34.81 port 44965 ssh2

sshd

34.81

209.141

23 条回复 • 1970-01-01 08:00:00 +08:00

clowwindy

2013-02-10 09:58:45 +08:00

被罚了多少？Buyvm 这种做法太粗暴了

dndx

2013-02-10 10:07:58 +08:00 via iPad

看样子像是用人用你的 vps 破解 ssh 密码。lz 确认自己没干过这事？

2013-02-10 10:33:59 +08:00

为什么叫“又被suspended”？之前被suspend过？

2013-02-10 10:35:47 +08:00

给你开了多少钱的罚单？

jmania

2013-02-10 11:31:07 +08:00 via Android

@clowwindy 没有被罚，就是主机被suspended了

jmania

2013-02-10 11:40:13 +08:00 via Android

@dndx 没啊，系统装好后就装了ngnix python ssh，网站还没来及部署上去。

jmania

2013-02-10 11:42:03 +08:00 via Android

@m 之前已经被suspended过了。刚恢复没几天。又来了。

sNullp

2013-02-10 11:50:20 +08:00

@jmania 说明你的机器密码可能被试出来了。。确实是有人用你的vps破解别人的ssh密码

jmania

2013-02-10 12:14:40 +08:00 via Android

@sNullp 看来最简单的就是重装系统了

bwlinux

2013-02-10 13:21:31 +08:00

LZ你被罚款了。你的vps被当肉鸡了？攻击quice的主机。

nichan

2013-02-10 13:32:28 +08:00

and a TOS/AUP Violation Fine (Invoice 65421) added to your account. This invoice must be paid in full before the service will be restored.

突然感觉Buyvm挺不人道的，说罚款就罚款啊。是不是Buyvm好多收入都来自罚款啊。。。