×ðÁú¿­Ê±¹ÙÍøµÇ¼

ÔöÇ¿ÄãµÄLinuxЧÀÍÆ÷Çå¾²ÐÔ£ºÊìÁ·Ê¹ÓÃÕâЩÏÂÁî

ÔöÇ¿ÄãµÄLinuxЧÀÍÆ÷Çå¾²ÐÔ£ºÊìÁ·Ê¹ÓÃÕâЩÏÂÁî

ÔÚÄ¿½ñ»¥ÁªÍøʱ´ú£¬Ð§ÀÍÆ÷ÊÇÐí¶àÆóÒµºÍСÎÒ˽ÈËËùÒÀÀµµÄÖ÷Òª»ù´¡ÉèÊ©¡£¶øΪÁË°ü¹ÜЧÀÍÆ÷µÄÇå¾²ÐÔ£¬ÎÒÃÇÐèÒª½ÓÄÉһϵÁв½·¥¡£³ýÁËÉèÖ÷À»ðǽ¡¢¸üвÙ×÷ϵͳºÍÈí¼þÒÔ¼°Ê¹ÓÃÇå¾²ÃÜÂëÍ⣬ÕÆÎÕһЩ³£ÓõÄÏÂÁîÒ²Äܹ»×ÊÖúÎÒÃǼà¿ØºÍ±£»¤Ð§ÀÍÆ÷¡£±¾ÎĽ«ÏÈÈÝһЩ³£ÓõÄLinuxÏÂÁ×ÊÖúÄãÔöÇ¿LinuxЧÀÍÆ÷µÄÇå¾²ÐÔ¡£

Éó²éµÇ¼ÈÕÖ¾

µÇ¼ÈÕÖ¾ÊÇЧÀÍÆ÷Çå¾²¼à¿ØµÄÒ»²¿·Ö¡£Í¨¹ýÉó²éµÇ¼ÈÕÖ¾£¬ÎÒÃÇ¿ÉÒÔ×·×ٵǼЧÀÍÆ÷µÄÓû§ºÍȪԴ¡£Ê¹ÓÃÈçÏÂÏÂÁî¿ÉÒÔÉó²éµÇ¼ÈÕÖ¾Îļþ£º

cat /var/log/auth.log       # Ubuntu
cat /var/log/secure         # CentOS

µÇ¼ºó¸´ÖÆ

µÇ¼ÈÕÖ¾¼Í¼ÁËÿ´ÎÀֳɺÍʧ°ÜµÄµÇ¼ʵÑ飬¿ÉÒÔ×ÊÖúÎÒÃÇ·¢Ã÷DZÔڵĹ¥»÷ÐÐΪ¡£

¼à¿ØÍøÂçÅþÁ¬

ÏàʶĿ½ñЧÀÍÆ÷µÄÍøÂçÅþÁ¬ÇéÐÎÒ²ÊÇÈ·±£Ð§ÀÍÆ÷Çå¾²µÄÒªº¦¡£Ê¹ÓÃÈçÏÂÏÂÁî¿ÉÒÔÉó²éÄ¿½ñµÄÍøÂçÅþÁ¬£º

netstat -atn   # Éó²éËùÓÐTCPÅþÁ¬
netstat -aun   # Éó²éËùÓÐUDPÅþÁ¬

µÇ¼ºó¸´ÖÆ

ͨ¹ýÉó²éÍøÂçÅþÁ¬£¬¿ÉÒÔʵʱ·¢Ã÷Òì³£Ô˶¯£¬ÀýÈç´ó×ÚµÄÍⲿÅþÁ¬¡¢Î´ÖªÅþÁ¬µÈ¡£

²éÕÒ¶ñÒâ³ÌÐò

¶ñÒâ³ÌÐòµÄ±£´æÊÇЧÀÍÆ÷Çå¾²µÄÖ÷ÒªÍþв£¬Í¨¹ý°´ÆÚɨÃè¿ÉÒÔ·¢Ã÷¶ñÒâÈí¼þµÄ±£´æ¡£Ê¹ÓÃÈçÏÂÏÂÁî¿ÉÒÔ²éÕÒ¶ñÒâ³ÌÐò£º

find / -name "*.php"     # ²éÕÒËùÓÐ.phpÎļþ
find / -name "suspicious_file"    # ²éÕÒÌض¨Îļþ

µÇ¼ºó¸´ÖÆ

ͨ¹ý²éÕÒÒì³£Îļþ£¬¿ÉÒÔʵʱ·¢Ã÷²¢É¾³ýDZÔÚµÄÇå¾²Íþв¡£

ϵͳÎó²îɨÃè

ʵʱÐÞ²¹ÏµÍ³Îó²îÒ²ÊÇÈ·±£Ð§ÀÍÆ÷Çå¾²µÄÖ÷Òª²½·¥Ö®Ò»¡£Ê¹ÓÃÈçÏÂÏÂÁî¿ÉÒÔɨÃèϵͳµÄÎó²î£º

sudo apt update
sudo apt upgrade
sudo apt-get dist-upgrade

µÇ¼ºó¸´ÖÆ

ÉÏÊöÏÂÁî»®·ÖÓÃÓÚ¸üÐÂÈí¼þ°üÁÐ±í¡¢¸üпÉÓÃÈí¼þ°üºÍ¸üп¯Ðаæ¡£

ÉèÖ÷À»ðǽ

·À»ðǽÊDZ£»¤Ð§ÀÍÆ÷µÄµÚÒ»µÀ·ÀµØ£¬ÉèÖÃ׼ȷµÄ·À»ðǽսÂÔºÜÊÇÖ÷Òª¡£ÒÔÏÂÏÂÁîÓÃÓÚÉèÖ÷À»ðǽ£º

ufw enable    # ÆôÓ÷À»ðǽ
ufw allow ssh    # ÔÊÐíSSHÅþÁ¬
ufw allow http    # ÔÊÐíHTTPÅþÁ¬
ufw allow https    # ÔÊÐíHTTPSÅþÁ¬

µÇ¼ºó¸´ÖÆ

ͨ¹ýÉèÖ÷À»ðǽ¹æÔò£¬¿ÉÒÔÏÞÖƶÔЧÀÍÆ÷µÄ»á¼ûȨÏÞ£¬Ìá¸ßЧÀÍÆ÷µÄÇå¾²ÐÔ¡£

ÃÜÂëÕ½ÂÔÉèÖÃ

Ç¿ÃÜÂëÕ½ÂÔ¿ÉÒÔ´ó´óÔöǿЧÀÍÆ÷µÄÇå¾²ÐÔ¡£Ê¹ÓÃÈçÏÂÏÂÁî¿ÉÒÔÉèÖÃÃÜÂëÕ½ÂÔ£º

sudo passwd -l username    # Ëø¶¨Óû§ÕË»§
sudo passwd -e username    # Ç¿ÖÆÓû§Ï´εǼʱÐÞ¸ÄÃÜÂë
sudo chage -l username    # Éó²éÓû§ÃÜÂë¸ü¸ÄÐÅÏ¢

µÇ¼ºó¸´ÖÆ

ͨ¹ýÉèÖÃÃÜÂëÕ½ÂÔ£¬¿ÉÒÔÒªÇóÓû§Ñ¡ÔñÔ½·¢Çå¾²µÄÃÜÂ룬²¢°´ÆÚ¸ü¸ÄÃÜÂë¡£

¼à²âϵͳ×ÊÔ´

¼à²âϵͳ×ÊÔ´µÄʹÓÃÇéÐοÉÒÔ×ÊÖúÎÒÃÇ·¢Ã÷Òì³£Ô˶¯ºÍDZÔÚµÄÇ徲Σº¦¡£ÒÔÏÂÊÇһЩ³£ÓõÄÏÂÁ

top    # Éó²éϵͳ×ÊԴʹÓÃÇéÐÎ
ps aux    # Éó²éÄ¿½ñÔËÐеÄÀú³Ì
du -h    # Éó²é´ÅÅÌʹÓÃÇéÐÎ

µÇ¼ºó¸´ÖÆ

ͨ¹ý¼à²âϵͳ×ÊÔ´£¬¿ÉÒÔʵʱ·¢Ã÷Òì³£Àú³Ì¡¢Òì³£´ÅÅÌʹÓõÈÇéÐΡ£

×ܽ᣺

ÒÔÉÏËùÌáµ½µÄÏÂÁîÖ»ÊÇLinuxЧÀÍÆ÷Çå¾²ÐÔÌáÉýµÄһС²¿·Ö£¬ÊìÁ·ÕÆÎÕÕâЩÏÂÁî¿ÉÒÔ×ÊÖúÎÒÃÇʵʱ·¢Ã÷²¢´¦ÀíÇå¾²Íþв¡£³ýÁ˶ÔÏÂÁîµÄÕÆÎÕ£¬ÎÒÃÇ»¹Ó¦¸ÃÆð¾¢Ñ§Ï°×îеÄÇå¾²ÊÖÒպͷÀÓùÕ½ÂÔ£¬ÒÔÌá¸ßЧÀÍÆ÷µÄÇå¾²ÐÔ¡£Í¨¹ýһֱѧϰºÍʵ¼ù£¬ÎÒÃÇÄܹ»´òÔìÔ½·¢Çå¾²µÄЧÀÍÆ÷ÇéÐΣ¬±£»¤ÎÒÃǵÄÊý¾ÝºÍϵͳÃâÊܹ¥»÷¡£

ÒÔÉϾÍÊÇÔöÇ¿ÄãµÄLinuxЧÀÍÆ÷Çå¾²ÐÔ£ºÊìÁ·Ê¹ÓÃÕâЩÏÂÁîµÄÏêϸÄÚÈÝ£¬¸ü¶àÇë¹Ø×¢±¾ÍøÄÚÆäËüÏà¹ØÎÄÕ£¡

ÃâÔð˵Ã÷£ºÒÔÉÏչʾÄÚÈÝȪԴÓÚÏàÖúýÌå¡¢ÆóÒµ»ú¹¹¡¢ÍøÓÑÌṩ»òÍøÂçÍøÂçÕûÀí£¬°æȨÕùÒéÓë±¾Õ¾Î޹أ¬ÎÄÕÂÉæ¼°¿´·¨Óë¿´·¨²»´ú±í×ðÁú¿­Ê±¹ÙÍøµÇ¼ÂËÓÍ»úÍø¹Ù·½Ì¬¶È£¬Çë¶ÁÕß½ö×ö²Î¿¼¡£±¾ÎĽӴýתÔØ£¬×ªÔØÇë˵Ã÷À´ÓÉ¡£ÈôÄúÒÔΪ±¾ÎÄÇÖÕ¼ÁËÄúµÄ°æȨÐÅÏ¢£¬»òÄú·¢Ã÷¸ÃÄÚÈÝÓÐÈκÎÉæ¼°ÓÐÎ¥¹«µÂ¡¢Ã°·¸Ö´·¨µÈÎ¥·¨ÐÅÏ¢£¬ÇëÄúÁ¬Ã¦ÁªÏµ×ðÁú¿­Ê±¹ÙÍøµÇ¼ʵʱÐÞÕý»òɾ³ý¡£

Ïà¹ØÐÂÎÅ

ÁªÏµ×ðÁú¿­Ê±¹ÙÍøµÇ¼

18523999891

¿É΢ÐÅÔÚÏß×Éѯ

ÊÂÇéʱ¼ä£ºÖÜÒ»ÖÁÖÜÎ壬9:30-18:30£¬½ÚãåÈÕÐÝÏ¢

QR code
ÍøÕ¾µØͼ