final Posted June 16, 2021 Share Posted June 16, 2021 最近看到奇怪的远程连接信息 就把unraid重做了 覆盖了config文件夹 发现还有 每天早上都会出现 信息如下 Jun 16 09:59:41 unRaid rsync[10422]: connect from 51.15.117.46 (51.15.117.46) Jun 16 09:59:41 unRaid rsyncd[10422]: forward name lookup for 46-117-15-51.instances.scw.cloud failed: Name or service not known Jun 16 09:59:41 unRaid rsyncd[10422]: connect from UNKNOWN (51.15.117.46) Jun 16 09:59:42 unRaid rsyncd[10422]: module-list request from UNKNOWN (51.15.117.46) Jun 16 09:59:43 unRaid rsync[10434]: connect from 51.15.117.46 (51.15.117.46) Jun 16 09:59:43 unRaid rsyncd[10434]: forward name lookup for 46-117-15-51.instances.scw.cloud failed: Name or service not known Jun 16 09:59:43 unRaid rsyncd[10434]: connect from UNKNOWN (51.15.117.46) Jun 16 09:59:43 unRaid rsyncd[10434]: rsync allowed access on module bak from UNKNOWN (51.15.117.46) Jun 16 09:59:43 unRaid rsyncd[10434]: auth failed on module bak from UNKNOWN (51.15.117.46) for happy: no matching rule Jun 16 09:59:44 unRaid rsync[10459]: connect from 51.15.117.46 (51.15.117.46) Jun 16 09:59:44 unRaid rsyncd[10459]: forward name lookup for 46-117-15-51.instances.scw.cloud failed: Name or service not known Jun 16 09:59:44 unRaid rsyncd[10459]: connect from UNKNOWN (51.15.117.46) Jun 16 09:59:45 unRaid rsyncd[10459]: rsync allowed access on module sync from UNKNOWN (51.15.117.46) Jun 16 09:59:45 unRaid rsyncd[10459]: auth failed on module sync from UNKNOWN (51.15.117.46) for happy: no matching rule Jun 16 10:03:51 unRaid root: Total Spundown: 2 Jun 16 10:08:51 unRaid root: Total Spundown: 2 Jun 16 10:12:15 unRaid rsyncd[13610]: rsync: [Receiver] safe_read failed to read 1 bytes: Connection timed out (110) Jun 16 10:12:15 unRaid rsyncd[13610]: rsync error: error in rsync protocol data stream (code 12) at io.c(276) [Receiver=3.2.3] Jun 16 10:13:51 unRaid root: Total Spundown: 2 Jun 16 10:14:02 unRaid rsync[21156]: connect from 192.241.214.99 (192.241.214.99) Jun 16 10:14:03 unRaid rsyncd[21156]: forward name lookup for zg-0609a-205.stretchoid.com failed: Name or service not known Jun 16 10:14:03 unRaid rsyncd[21156]: connect from UNKNOWN (192.241.214.99) Quote Link to comment
lyqalex Posted June 16, 2021 Share Posted June 16, 2021 final,我估计是你其中一个docker程序有问题,可以先停止可能性较大的docker程序,或者全部关闭,逐一启动排查。 PS:感觉是cloud应用。因我一直没安装类似程序,所以不知道具体是哪个。 Quote Link to comment
final Posted June 17, 2021 Author Share Posted June 17, 2021 12 hours ago, lyqalex said: final,我估计是你其中一个docker程序有问题,可以先停止可能性较大的docker程序,或者全部关闭,逐一启动排查。 PS:感觉是cloud应用。因我一直没安装类似程序,所以不知道具体是哪个。 好的 我的docker程序不多 我将进行排查 感谢~~ Quote Link to comment
final Posted June 20, 2021 Author Share Posted June 20, 2021 On 6/16/2021 at 8:50 PM, lyqalex said: final,我估计是你其中一个docker程序有问题,可以先停止可能性较大的docker程序,或者全部关闭,逐一启动排查。 PS:感觉是cloud应用。因我一直没安装类似程序,所以不知道具体是哪个。 尴尬了。。停了所有docker应用 第二天看日志依旧有远程连接信息。。看来是某个插件造成的了 Quote Link to comment
lyqalex Posted June 20, 2021 Share Posted June 20, 2021 hi,final,那么就查看插件的介绍,排除可能的插件。 Quote Link to comment
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.