防火墙日志咨询
- 0关注
- 0收藏，100浏览
问题描述：
%Dec 11 17:53:54:029 2024 F1000-AK1010 SSHS/6/SSHS_LOG: Authentication failed for chenpengtao from 45.148.10.128 port 45516 because of invalid username or wrong password .
%Dec 11 17:53:54:636 2024 F1000-AK1010 SYSLOG/5/LOGFILE_USAGEHIGH: The usage of log-file flash:/logfile/filter.log reaches 80%.
%Dec 11 17:53:55:648 2024 F1000-AK1010 SSHS/6/SSHS_LOG: Connection closed by 45.148.10.128.
%Dec 11 17:53:55:648 2024 F1000-AK1010 SSHS/6/SSHS_DISCONNECT: SSH user chenpengtao (IP: 45.148.10.128) disconnected from the server.
%Dec 11 17:54:03:801 2024 F1000-AK1010 SYSLOG/5/LOGFILE_USAGEHIGH: The usage of log-file flash:/logfile/filter.log reaches 80%.
%Dec 11 17:54:22:989 2024 F1000-AK1010 SHELL/5/SHELL_LOGIN: Console logged in from con0.
%Dec 11 17:54:26:430 2024 F1000-AK1010 SHELL/6/SHELL_CMD: -Line=con0-IPAddr=**-User=**; Command is sys
%Dec 11 17:54:28:106 2024 F1000-AK1010 SYSLOG/5/LOGFILE_USAGEHIGH: The usage of log-file flash:/logfile/filter.log reaches 80%.
%Dec 11 17:54:28:213 2024 F1000-AK1010 SHELL/6/SHELL_CMD: -Line=con0-IPAddr=**-User=**; Command is dis cur
%Dec 11 17:54:41:058 2024 F1000-AK1010 SSHS/6/SSHS_LOG: Authentication failed for sunyouxi from 45.148.10.128 port 45096 because of invalid username or wrong password .
%Dec 11 17:54:41:261 2024 F1000-AK1010 SSHS/6/SSHS_LOG: Connection closed by 45.148.10.128.
%Dec 11 17:54:41:261 2024 F1000-AK1010 SSHS/6/SSHS_DISCONNECT: SSH user sunyouxi (IP: 45.148.10.128) disconnected from the server.
%Dec 11 17:54:58:500 2024 F1000-AK1010 SYSLOG/5/LOGFILE_USAGEHIGH: The usage of log-file flash:/logfile/filter.log reaches 80%.
%Dec 11 17:55:19:590 2024 F1000-AK1010 IFNET/3/PHY_UPDOWN: Physical state on the interface GigabitEthernet1/0/7 changed to up.
%Dec 11 17:55:19:591 2024 F1000-AK1010 IFNET/5/LINK_UPDOWN: Line protocol state on the interface GigabitEthernet1/0/7 changed to up.
%Dec 11 17:55:19:592 2024 F1000-AK1010 IFNET/3/PHY_UPDOWN: Physical state on the interface GigabitEthernet1/0/8 changed to up.
%Dec 11 17:55:19:593 2024 F1000-AK1010 IFNET/5/LINK_UPDOWN: Line protocol state on the interface GigabitEthernet1/0/8 changed to up.
%Dec 11 17:55:26:562 2024 F1000-AK1010 SYSLOG/5/LOGFILE_USAGEHIGH: The usage of log-file flash:/logfile/filter.log reaches 80%.
%Dec 11 17:55:35:631 2024 F1000-AK1010 SHELL/6/SHELL_CMD: -Line=con0-IPAddr=**-User=**; Command is dis cpu
%Dec 11 17:55:52:188 2024 F1000-AK1010 SYSLOG/5/LOGFILE_USAGEHIGH: The usage of log-file flash:/logfile/filter.log reaches 80%.
%Dec 11 17:55:55:618 2024 F1000-AK1010 SHELL/6/SHELL_CMD: -Line=con0-IPAddr=**-User=**; Command is dis cur
%Dec 11 17:56:21:156 2024 F1000-AK1010 SYSLOG/5/LOGFILE_USAGEHIGH: The usage of log-file flash:/logfile/filter.log reaches 80%.
%Dec 11 17:56:28:587 2024 F1000-AK1010 SSHS/6/SSHS_LOG: Authentication failed for test011 from 45.148.10.128 port 44674 because of invalid username or wrong password .
%Dec 11 17:56:28:798 2024 F1000-AK1010 SSHS/6/SSHS_LOG: Connection closed by 45.148.10.128.
%Dec 11 17:56:28:798 2024 F1000-AK1010 SSHS/6/SSHS_DISCONNECT: SSH user test011 (IP: 45.148.10.128) disconnected from the server.
%Dec 11 17:56:52:277 2024 F1000-AK1010 SYSLOG/5/LOGFILE_USAGEHIGH: The usage of log-file flash:/logfile/filter.log reaches 80%.
如题
- 2024-12-11提问
- 举报
-
(0)
看日志有频繁登录失败信息及端口updown信息已经filter.log存储日志超过80%
- 2024-12-11回答
- 评论(2)
- 举报
-
(1)
请教一下1、如何清理存储日志 2、这三个是未知用户频繁ssh防火墙，如何避免
编辑答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明
1、删除这个日志 2、把这个地址加入黑名单