{"id":889,"date":"2020-08-25T21:24:43","date_gmt":"2020-08-25T12:24:43","guid":{"rendered":"https:\/\/www.typea.info\/blog\/?p=889"},"modified":"2020-10-30T23:53:06","modified_gmt":"2020-10-30T14:53:06","slug":"sakura-vps-sshd-attack","status":"publish","type":"post","link":"https:\/\/www.typea.info\/blog\/index.php\/2020\/08\/25\/sakura-vps-sshd-attack\/","title":{"rendered":"Sakura VPS \u3067 SSH \u653b\u6483\u3055\u308c\u3066CPU\u5236\u9650\u304c\u304b\u304b\u3063\u305f\u306e\u3067\u5bfe\u51e6\u3057\u305f\u8a71"},"content":{"rendered":"<p>\u00a0<\/p>\n<p><a href=\"https:\/\/www.amazon.co.jp\/Linux%E3%82%B5%E3%83%BC%E3%83%90%E5%85%A5%E9%96%80-%EF%BC%BBCentOS-8%E5%AF%BE%E5%BF%9C%EF%BC%BD-impress-gear%E3%82%B7%E3%83%AA%E3%83%BC%E3%82%BA-ebook\/dp\/B08764382M\/ref=as_li_ss_il?__mk_ja_JP=%E3%82%AB%E3%82%BF%E3%82%AB%E3%83%8A&amp;dchild=1&amp;keywords=Centos&amp;qid=1598356002&amp;sr=8-2&amp;linkCode=li2&amp;tag=typea09-22&amp;linkId=4b0634e1fa3ad68986b264ac9e146588\" target=\"_blank\" rel=\"noopener noreferrer\"><img decoding=\"async\" src=\"\/\/ws-fe.amazon-adsystem.com\/widgets\/q?_encoding=UTF8&amp;ASIN=B08764382M&amp;Format=_SL160_&amp;ID=AsinImage&amp;MarketPlace=JP&amp;ServiceVersion=20070822&amp;WS=1&amp;tag=typea09-22\" border=\"0\" \/><\/a><img loading=\"lazy\" decoding=\"async\" style=\"margin: 0px !important; border: currentcolor !important; border-image: none !important;\" src=\"https:\/\/ir-jp.amazon-adsystem.com\/e\/ir?t=typea09-22&amp;l=li2&amp;o=9&amp;a=B08764382M\" alt=\"\" width=\"1\" height=\"1\" border=\"0\" \/><\/p>\n<p>\u00a0<\/p>\n<h2>1.Sakura VPS \u30b5\u30fc\u30d0\u30fc\u3067CPU\u5236\u9650\uff01\uff1f<\/h2>\n<p>\u6570\u30f6\u6708\u524d\u306b\u30b5\u30fc\u30d0\u30fc\u3092 <a href=\"http:\/\/serversman.com\/\">Server\u2019s Man<\/a> \u304b\u3089 <a href=\"https:\/\/vps.sakura.ad.jp\/\">Sakura<\/a> \u306b\u4e57\u308a\u63db\u3048\u3066\u3001\u3001\u3001\u306a\u3093\u3067\u4e57\u308a\u63db\u3048\u305f\u3093\u3060\u3063\u3051\u3002\u3002<\/p>\n<p>\u3042\u3042\u3001\u305d\u3046\u3060\u3001<a href=\"https:\/\/dawaan.com\/centos7-problematic-vps\/\">CentOS7\u306e\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u66f4\u65b0\u3067\u304d\u306a\u3044<\/a>\u304b\u3089\u3060\u3002\u3002\u3002<\/p>\n<p>\u79fb\u884c\u4f5c\u696d\u3092\u3061\u3093\u305f\u3089\u3084\u3063\u3066\u3044\u308b\u3068\u304d\u306b\u3001<a href=\"https:\/\/www.typea.info\/blog\/index.php\/2020\/07\/07\/mediawiki-delete-spam-page-and-invalid-users\/\">MediaWiki\u306e\u4e0d\u6b63\u30e6\u30fc\u30b6\u30fc\u3092\u3042\u307b\u307b\u3069\u4f5c\u3089\u308c\u3066<\/a> \u5927\u5909\u3060\u3063\u305f\u306e\u3060\u304c\u3001<\/p>\n<p>\u3061\u3087\u3063\u3068\u3001\u305d\u306e<a href=\"https:\/\/www.typea.info\/tips_\">MediaWiki<\/a> \u306b\u30e1\u30e2\u3092\u66f8\u304d\u8fbc\u3093\u3067\u3044\u305f\u3089\u3001\u3084\u305f\u3089\u30ec\u30b9\u30dd\u30f3\u30b9\u304c\u304a\u305d\u3044\u3002\u3002\u3002<\/p>\n<p>Wifi \u4e0d\u8abf\u304b\u306a\u3001\u3053\u306a\u3044\u3060\u8a2d\u7f6e\u3057\u305f\u4e2d\u7d99\u5668\u306e\u305b\u3044\u304b\u306a\u30fc\u306a\u3093\u3066\u3001speed \u30c6\u30b9\u30c8\u3057\u305f\u3089\u3001\u3057\u3063\u304b\u308a\u30b9\u30d4\u30fc\u30c9\u51fa\u3066\u308b\u3002\u3002<\/p>\n<p>\u3042\u3042\u3001\u539f\u56e0\u306f\u3001\u81ea\u5206\u306e\u30b5\u30fc\u30d0\u30fc\u3084\u3002<\/p>\n<p>\u3068\u3044\u3046\u3053\u3068\u3067\u3001Sakura \u306e\u7ba1\u7406\u30b3\u30f3\u30bd\u30fc\u30eb\u898b\u308b\u3068\u3001\u3001\u3001<\/p>\n<p>\u00a0<\/p>\n<h3>1.1 CPU\u5236\u9650\u4e2d<\/h3>\n<p><span style=\"color: #ff0000; font-size: large;\">CPU \u30ea\u30bd\u30fc\u30b9\u5236\u9650\u4e2d\uff01\uff01<\/span><\/p>\n<p>\u306a\u306b\u305d\u308c\uff1f<\/p>\n<p><a href=\"https:\/\/www.typea.info\/blog\/wp-content\/uploads\/2020\/08\/Inkedlimit_cpu2.jpg\"><img loading=\"lazy\" decoding=\"async\" style=\"display: inline; background-image: none;\" title=\"Inkedlimit_cpu2\" src=\"https:\/\/www.typea.info\/blog\/wp-content\/uploads\/2020\/08\/Inkedlimit_cpu2_thumb.jpg\" alt=\"Inkedlimit_cpu2\" width=\"556\" height=\"124\" border=\"0\" \/><\/a><\/p>\n<p>\u00a0<\/p>\n<p>\u30b0\u30b0\u308b\u3068\u306a\u306b\u3084\u3089<a href=\"https:\/\/www.google.com\/search?q=%E3%81%95%E3%81%8F%E3%82%89+vps+cpu+%E5%88%B6%E9%99%90&amp;oq=sakura+cpu+&amp;aqs=chrome.2.69i57j0l2.3966j0j7&amp;sourceid=chrome&amp;ie=UTF-8\">\u4e0d\u7a4f\u306a\u611f\u3058<\/a>\u3002<\/p>\n<p>\u00a0<\/p>\n<p>\u3068\u308a\u3042\u3048\u305a\u3001\u30b5\u30fc\u30d0\u30fc\u306b\u63a5\u7d9a\u3057\u3066\u3001top \u30b3\u30de\u30f3\u30c9\u305f\u305f\u304f\u3068\u3001\u3001\u3001<\/p>\n<p>sshd \u306e\u30d7\u30ed\u30bb\u30b9\u304c\u305f\u304f\u3055\u3093\u3002\u3042\u3042\u3002\u3053\u308c\u306f\u304d\u3063\u3068\u3002<\/p>\n<p>\u00a0<\/p>\n<p><a href=\"https:\/\/www.typea.info\/blog\/wp-content\/uploads\/2020\/08\/top_command.jpg\"><img loading=\"lazy\" decoding=\"async\" style=\"display: inline; background-image: none;\" title=\"top_command\" src=\"https:\/\/www.typea.info\/blog\/wp-content\/uploads\/2020\/08\/top_command_thumb.jpg\" alt=\"top_command\" width=\"417\" height=\"241\" border=\"0\" \/><\/a><\/p>\n<p>\u00a0<\/p>\n<h3>1.2 \u8ca0\u8377\u72b6\u6cc1<\/h3>\n<p>\u7ba1\u7406\u30b3\u30f3\u30bd\u30fc\u30eb\u306e\u8ca0\u8377\u72b6\u6cc1\u3092\u898b\u308b\u3068\u3001\u4eca\u671d\u304b\u3089\u306a\u306b\u3084\u3089\u4e0d\u7a4f\u306a\u6319\u52d5\u3002<\/p>\n<p>\u78ba\u304b\u306bCPU\u5229\u7528\u304c\u30b9\u30d1\u30a4\u30af\u3057\u3066\u307e\u3059\u3002<\/p>\n<p>\u00a0<\/p>\n<p><a href=\"https:\/\/www.typea.info\/blog\/wp-content\/uploads\/2020\/08\/spike_graph.jpg\"><img loading=\"lazy\" decoding=\"async\" style=\"display: inline; background-image: none;\" title=\"spike_graph\" src=\"https:\/\/www.typea.info\/blog\/wp-content\/uploads\/2020\/08\/spike_graph_thumb.jpg\" alt=\"spike_graph\" width=\"428\" height=\"269\" border=\"0\" \/><\/a><\/p>\n<p>\u00a0<\/p>\n<h3>1.3 SSH\u30a2\u30af\u30bb\u30b9\u306e\u30ed\u30b0\u3092\u78ba\u8a8d<\/h3>\n<p>secure \u30ed\u30b0\u3092 \u898b\u308b\u3068\u3001\u3001\u3001\u3072\u3063\u304d\u308a\u306a\u3057\u306b\u6765\u3066\u308b\u6765\u3066\u308b\u3002<\/p>\n<p>\u8f9e\u66f8\u30a2\u30bf\u30c3\u30af\u304b\u306a\u30fc<\/p>\n<p>\u00a0<\/p>\n<p>tail -f \/var\/log\/secure<\/p>\n<p>\u00a0<\/p>\n<p><iframe loading=\"lazy\" src=\"https:\/\/www.youtube.com\/embed\/uww-38YqAgY\" width=\"560\" height=\"315\" frameborder=\"0\" allowfullscreen=\"\"><\/iframe><\/p>\n<p>\u00a0<\/p>\n<h2>2.\u5bfe\u51e6<\/h2>\n<p>\u305d\u3046\u3044\u3048\u3070\u3001Server\u2019s Man \u306eSSH\u306f\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u306e22\u756a\u30dd\u30fc\u30c8\u3058\u3083\u306a\u304f\u3066\u3001\u72ec\u81ea\u306e\u30dd\u30fc\u30c8\u306b\u3057\u3066\u305f\u306a\u3041\u3002<\/p>\n<p>\u3068\u3044\u3046\u3053\u3068\u3067\u3001sshd \u306e\u30dd\u30fc\u30c8\u3092\u5909\u66f4\u3059\u308b\u3002<\/p>\n<p>\u00a0<\/p>\n<h3>2.1 \u524d\u63d0<\/h3>\n<p>\u4ee5\u4e0b\u3092\u524d\u63d0\u306b\u5bfe\u51e6\u3092\u884c\u3046\u3002<\/p>\n<ul>\n<li>\u65b0\u3057\u3044\u30dd\u30fc\u30c8\u3092\u4eee\u306b\u30019999 \u3068\u3059\u308b<\/li>\n<li>SELinux \u306f OFF<\/li>\n<li>Firewall \u306f OFF Sakura\u306e\u30d1\u30b1\u30c3\u30c8\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3092\u5229\u7528<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<h3>2.1.1 SELinux \u306e\u7121\u52b9\u78ba\u8a8d<\/h3>\n<pre class=\"prettyprint\"># getenforce\nDisabled\n<\/pre>\n<h3>2.1.2 Firewall\u306e\u7121\u52b9\u78ba\u8a8d<\/h3>\n<pre class=\"prettyprint\"># systemctl status firewalld\n\u25cf firewalld.service - firewalld - dynamic firewall daemon\n Loaded: loaded (\/usr\/lib\/systemd\/system\/firewalld.service; disabled; vendor preset: enabled)\n Active: inactive (dead)\n Docs: man:firewalld(1)<\/pre>\n<p>\u00a0<\/p>\n<h3>2.2 SSH\u3067\u63a5\u7d9a\u3067\u304d\u306a\u304f\u306a\u3063\u305f\u3089\u6050\u308d\u3057\u3044\u306e\u3067\u3001\u7ba1\u7406\u30b3\u30f3\u30bd\u30fc\u30eb\u304b\u3089\u63a5\u7d9a\u3067\u304d\u308b\u3053\u3068\u3092\u78ba\u8a8d<\/h3>\n<p>\u6700\u60aaSSH\u3067\u304d\u306a\u304f\u306a\u3063\u3066\u3082\u3001\u3053\u3053\u304b\u3089\u30b5\u30fc\u30d0\u30fc\u306b\u63a5\u7d9a\u3057\u3066\u4f55\u3068\u304b\u3067\u304d\u308b\u3053\u3068\u3092\u78ba\u8a8d<\/p>\n<p><a href=\"https:\/\/www.typea.info\/blog\/wp-content\/uploads\/2020\/08\/vnc_console.png\"><img loading=\"lazy\" decoding=\"async\" style=\"display: inline; background-image: none;\" title=\"vnc_console\" src=\"https:\/\/www.typea.info\/blog\/wp-content\/uploads\/2020\/08\/vnc_console_thumb.png\" alt=\"vnc_console\" width=\"412\" height=\"135\" border=\"0\" \/><\/a><\/p>\n<p>\u00a0<\/p>\n<h3>2.3 sshd \u306e\u8a2d\u5b9a\u3067\u30dd\u30fc\u30c8\u3092\u5909\u66f4<\/h3>\n<p>\u00a0<\/p>\n<p>\/etc\/ssh\/sshd_config \u3092\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u7de8\u96c6<\/p>\n<p>Port 9999 \u306e\u884c\u3092\u8ffd\u8a18<\/p>\n<p>\u00a0<\/p>\n<pre class=\"prettyprint\">#Port 22\nPort 9999\n<\/pre>\n<p>\u00a0<\/p>\n<h3>2.4\u3000sshd \u518d\u8d77\u52d5\u3067\u3067\u6709\u52b9\u5316<\/h3>\n<pre class=\"prettyprint\"># systemctl restart sshd<\/pre>\n<p>\u00a0<\/p>\n<h3>2.5 \u65b0\u3057\u3044\u30dd\u30fc\u30c8\u3092\u30ea\u30c3\u30b9\u30f3\u3057\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d<\/h3>\n<p>\u00a0<\/p>\n<pre class=\"prettyprint\"># lsof -i:9999\nCOMMAND PID USER FD TYPE DEVICE SIZE\/OFF NODE NAME\nsshd 2558 root 3u IPv4 65145 0t0 TCP *:caids-sensor (LISTEN)\n<\/pre>\n<p>\u00a0<\/p>\n<h3>2.6 Sakura\u306e\u30dd\u30fc\u30c8\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3092\u8a2d\u5b9a<\/h3>\n<ul>\n<li>SSH 22\u756a\u3092\u6bba\u3059<\/li>\n<li>\u30ab\u30b9\u30bf\u30e0\u30dd\u30fc\u30c8 9999 \u3092\u8ffd\u52a0<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<p><a href=\"https:\/\/www.typea.info\/blog\/wp-content\/uploads\/2020\/08\/packet_filter.jpg\"><img loading=\"lazy\" decoding=\"async\" style=\"display: inline; background-image: none;\" title=\"packet_filter\" src=\"https:\/\/www.typea.info\/blog\/wp-content\/uploads\/2020\/08\/packet_filter_thumb.jpg\" alt=\"packet_filter\" width=\"436\" height=\"168\" border=\"0\" \/><\/a><\/p>\n<p>\u00a0<\/p>\n<h3>2.7 \u30dd\u30fc\u30c8\u3092\u6307\u5b9a\u3057\u3066SSH\u63a5\u7d9a\u3067\u304d\u308b\u3053\u3068\u3092\u78ba\u8a8d<\/h3>\n<p>\u00a0<\/p>\n<pre class=\"prettyprint\">ssh root@\u30b5\u30fc\u30d0\u30fc\u30a2\u30c9\u30ec\u30b9 -p 9999<\/pre>\n<p>\u00a0<\/p>\n<h2>3.\u5bfe\u7b56\u5f8c<\/h2>\n<h3>3.1 \u653b\u6483\u306b\u3088\u308bCPU\u9ad8\u8ca0\u8377\u304a\u3061\u3064\u3044\u305f\u3002\u3002\u3002<\/h3>\n<p>\u00a0<\/p>\n<p><a href=\"https:\/\/www.typea.info\/blog\/wp-content\/uploads\/2020\/08\/after_change_port.jpg\"><img loading=\"lazy\" decoding=\"async\" style=\"display: inline; background-image: none;\" title=\"after_change_port\" src=\"https:\/\/www.typea.info\/blog\/wp-content\/uploads\/2020\/08\/after_change_port_thumb.jpg\" alt=\"after_change_port\" width=\"432\" height=\"254\" border=\"0\" \/><\/a><\/p>\n<p>\u00a0<\/p>\n<h3>3.2 \u3057\u3070\u3089\u304f\u3057\u305f\u3089\u3001CPU\u5236\u9650\u3082\u89e3\u9664\u3055\u308c\u305f\u308f\u3002<\/h3>\n<p><a href=\"https:\/\/www.typea.info\/blog\/wp-content\/uploads\/2020\/08\/end_limit.jpg\"><img loading=\"lazy\" decoding=\"async\" style=\"display: inline; background-image: none;\" title=\"end_limit\" src=\"https:\/\/www.typea.info\/blog\/wp-content\/uploads\/2020\/08\/end_limit_thumb.jpg\" alt=\"end_limit\" width=\"640\" height=\"115\" border=\"0\" \/><\/a><\/p>\n<p>\u3088\u304b\u3064\u305f\u3088\u304b\u3064\u305f\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u00a0 \u00a0 1.Sakura VPS \u30b5\u30fc\u30d0\u30fc\u3067CPU\u5236\u9650\uff01\uff1f \u6570\u30f6\u6708\u524d\u306b\u30b5\u30fc\u30d0\u30fc\u3092 Server\u2019s Man \u304b\u3089 Sakura \u306b\u4e57\u308a\u63db\u3048\u3066\u3001\u3001\u3001\u306a\u3093\u3067\u4e57\u308a\u63db\u3048\u305f\u3093\u3060\u3063\u3051\u3002\u3002 \u3042\u3042\u3001\u305d\u3046\u3060\u3001CentOS7\u306e\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u66f4 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":899,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"sns_share_botton_hide":"","vkExUnit_sns_title":"","_vk_print_noindex":"","sitemap_hide":"","_veu_custom_css":"","veu_display_promotion_alert":"","vkexunit_cta_each_option":"","footnotes":""},"categories":[64,8],"tags":[],"class_list":["post-889","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-centos","category-server"],"veu_head_title_object":{"title":"","add_site_title":""},"_links":{"self":[{"href":"https:\/\/www.typea.info\/blog\/index.php\/wp-json\/wp\/v2\/posts\/889","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.typea.info\/blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.typea.info\/blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.typea.info\/blog\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.typea.info\/blog\/index.php\/wp-json\/wp\/v2\/comments?post=889"}],"version-history":[{"count":2,"href":"https:\/\/www.typea.info\/blog\/index.php\/wp-json\/wp\/v2\/posts\/889\/revisions"}],"predecessor-version":[{"id":900,"href":"https:\/\/www.typea.info\/blog\/index.php\/wp-json\/wp\/v2\/posts\/889\/revisions\/900"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.typea.info\/blog\/index.php\/wp-json\/wp\/v2\/media\/899"}],"wp:attachment":[{"href":"https:\/\/www.typea.info\/blog\/index.php\/wp-json\/wp\/v2\/media?parent=889"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.typea.info\/blog\/index.php\/wp-json\/wp\/v2\/categories?post=889"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.typea.info\/blog\/index.php\/wp-json\/wp\/v2\/tags?post=889"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}