Journalctl 显示了很多外国地址，它们是什么，它们是什么意思？

Question

我试图调试我的apache服务器并使用journalctl，列出了大量的外国地址，例如中文和俄文-它们也在vino-server旁边，我认为这是我的VNC服务器，如果它被黑了会很危险。

这些地址是否应该在那里，我该如何摆脱它们？

这是一些输出：

Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      new.dskazan.ru
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      new.dskazan.ru
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      210.51.2.210
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      new.dskazan.ru
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      66.136.241.35.bc.googleusercontent.com
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      new.dskazan.ru
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      new.dskazan.ru
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      dsl-189-151-234-109-dyn.prod-infinitum.com.mx
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      210.51.2.210
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      new.dskazan.ru
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      66.136.241.35.bc.googleusercontent.com
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      190.235.68.236
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      new.dskazan.ru
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      new.dskazan.ru
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      new.dskazan.ru
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      210.51.2.210
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      66.136.241.35.bc.googleusercontent.com
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      new.dskazan.ru
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      dsl-189-151-234-109-dyn.prod-infinitum.com.mx
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      new.dskazan.ru
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      new.dskazan.ru
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      210.51.2.210
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      190.235.68.236
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      66.136.241.35.bc.googleusercontent.com
Aug 08 11:30:38 Media-Server vino-server[4414]: 08/08/2019 11:30:38      663.gra1.ovh.abcd.network
Aug 08 11:30:39 Media-Server vino-server[4414]: Deferring authentication of '66.136.241.35.bc.googleusercontent.com' for 5 seconds
Aug 08 11:30:44 Media-Server vino-server[4414]: VNC authentication failure from '66.136.241.35.bc.googleusercontent.com'```

Answer 1

欢迎来到精彩的互联网世界，在那里俄罗斯、法国和墨西哥的 Bot Maffia 可以随时使用另一个被黑的服务器。（这 3 个国家只是我检查过的 3 个不同的主机名）

没有办法“摆脱”这些，但您可以通过以下方式保护自己：

• 让 VNC vino 在 SSH 隧道上运行
• 强化您的服务器
• 使用强而长的密码
• 开启自动安全更新
• 在固件 (UEFI/BIOS) 中禁用所有不需要的硬件（USB 端口、FireWire、WiFi...）
• 不要安装不需要的软件
• 删除您不使用的软件
• 进行系统备份
• 等等...

以上是一个非详尽列表，但应该让您以不同的方式思考您的服务器，因为“被黑客入侵”只是当今宇宙互联网背景辐射的一部分。