|
Czy to mogła być próba dostania się na router?
|
| naiLo |
Dodano 07-07-2011 20:38
|
User
Posty: 64
Dołączył: 16/09/2006 09:42
|
Właśnie przeglądam logi na tomato i zauważyłem mase prób połączenia się.
Czy to mogła być próba włamania? wyglada że adres ip pochodzi z turcji...
Jul 7 05:34:46 RT-N16 authpriv.info dropbear[4354]: Child connection from ::ffff:212.156.50.14:52233
Jul 7 05:34:47 RT-N16 authpriv.warn dropbear[4354]: Bad password attempt for 'root' from ::ffff:212.156.50.14:52233
Jul 7 05:34:48 RT-N16 authpriv.info dropbear[4354]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:35:58 RT-N16 authpriv.info dropbear[4382]: Child connection from ::ffff:212.156.50.14:31401
Jul 7 05:35:59 RT-N16 authpriv.warn dropbear[4382]: Login attempt for nonexistent user from ::ffff:212.156.50.14:31401
Jul 7 05:36:00 RT-N16 authpriv.info dropbear[4382]: Exit before auth: Disconnect received
Jul 7 05:37:08 RT-N16 authpriv.info dropbear[4410]: Child connection from ::ffff:212.156.50.14:32231
Jul 7 05:37:09 RT-N16 authpriv.warn dropbear[4410]: Bad password attempt for 'root' from ::ffff:212.156.50.14:32231
Jul 7 05:37:09 RT-N16 authpriv.info dropbear[4410]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:38:18 RT-N16 authpriv.info dropbear[4437]: Child connection from ::ffff:212.156.50.14:55716
Jul 7 05:38:19 RT-N16 authpriv.warn dropbear[4437]: Bad password attempt for 'root' from ::ffff:212.156.50.14:55716
Jul 7 05:38:19 RT-N16 authpriv.info dropbear[4437]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:39:28 RT-N16 authpriv.info dropbear[4465]: Child connection from ::ffff:212.156.50.14:50759
Jul 7 05:39:29 RT-N16 authpriv.warn dropbear[4465]: Bad password attempt for 'root' from ::ffff:212.156.50.14:50759
Jul 7 05:39:30 RT-N16 authpriv.info dropbear[4465]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:40:38 RT-N16 authpriv.info dropbear[4493]: Child connection from ::ffff:212.156.50.14:47335
Jul 7 05:40:39 RT-N16 authpriv.warn dropbear[4493]: Bad password attempt for 'root' from ::ffff:212.156.50.14:47335
Jul 7 05:40:39 RT-N16 authpriv.info dropbear[4493]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:41:47 RT-N16 authpriv.info dropbear[4520]: Child connection from ::ffff:212.156.50.14:51233
Jul 7 05:41:49 RT-N16 authpriv.warn dropbear[4520]: Bad password attempt for 'root' from ::ffff:212.156.50.14:51233
Jul 7 05:41:49 RT-N16 authpriv.info dropbear[4520]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:42:57 RT-N16 authpriv.info dropbear[4547]: Child connection from ::ffff:212.156.50.14:57038
Jul 7 05:42:59 RT-N16 authpriv.warn dropbear[4547]: Bad password attempt for 'root' from ::ffff:212.156.50.14:57038
Jul 7 05:42:59 RT-N16 authpriv.info dropbear[4547]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:44:07 RT-N16 authpriv.info dropbear[4575]: Child connection from ::ffff:212.156.50.14:48502
Jul 7 05:44:09 RT-N16 authpriv.warn dropbear[4575]: Bad password attempt for 'root' from ::ffff:212.156.50.14:48502
Jul 7 05:44:09 RT-N16 authpriv.info dropbear[4575]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:45:17 RT-N16 authpriv.info dropbear[4602]: Child connection from ::ffff:212.156.50.14:55092
Jul 7 05:45:19 RT-N16 authpriv.warn dropbear[4602]: Bad password attempt for 'root' from ::ffff:212.156.50.14:55092
Jul 7 05:45:19 RT-N16 authpriv.info dropbear[4602]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:46:27 RT-N16 authpriv.info dropbear[4630]: Child connection from ::ffff:212.156.50.14:60636
Jul 7 05:46:29 RT-N16 authpriv.warn dropbear[4630]: Bad password attempt for 'root' from ::ffff:212.156.50.14:60636
Jul 7 05:46:29 RT-N16 authpriv.info dropbear[4630]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:47:38 RT-N16 authpriv.info dropbear[4657]: Child connection from ::ffff:212.156.50.14:28823
Jul 7 05:47:39 RT-N16 authpriv.warn dropbear[4657]: Bad password attempt for 'root' from ::ffff:212.156.50.14:28823
Jul 7 05:47:39 RT-N16 authpriv.info dropbear[4657]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:48:47 RT-N16 authpriv.info dropbear[4684]: Child connection from ::ffff:212.156.50.14:37681
Jul 7 05:48:49 RT-N16 authpriv.warn dropbear[4684]: Bad password attempt for 'root' from ::ffff:212.156.50.14:37681
Jul 7 05:48:49 RT-N16 authpriv.info dropbear[4684]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:49:57 RT-N16 authpriv.info dropbear[4712]: Child connection from ::ffff:212.156.50.14:47059
Jul 7 05:49:59 RT-N16 authpriv.warn dropbear[4712]: Bad password attempt for 'root' from ::ffff:212.156.50.14:47059
Jul 7 05:49:59 RT-N16 authpriv.info dropbear[4712]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:51:07 RT-N16 authpriv.info dropbear[4739]: Child connection from ::ffff:212.156.50.14:41084
Jul 7 05:51:09 RT-N16 authpriv.warn dropbear[4739]: Bad password attempt for 'root' from ::ffff:212.156.50.14:41084
Jul 7 05:51:09 RT-N16 authpriv.info dropbear[4739]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:52:17 RT-N16 authpriv.info dropbear[4766]: Child connection from ::ffff:212.156.50.14:33363
Jul 7 05:52:18 RT-N16 authpriv.warn dropbear[4766]: Bad password attempt for 'root' from ::ffff:212.156.50.14:33363
Jul 7 05:52:18 RT-N16 authpriv.info dropbear[4766]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:53:26 RT-N16 authpriv.info dropbear[4793]: Child connection from ::ffff:212.156.50.14:58896
Jul 7 05:53:27 RT-N16 authpriv.warn dropbear[4793]: Bad password attempt for 'root' from ::ffff:212.156.50.14:58896
Jul 7 05:53:28 RT-N16 authpriv.info dropbear[4793]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 05:54:36 RT-N16 authpriv.info dropbear[4821]: Child connection from ::ffff:212.156.50.14:38588
Jul 7 05:54:37 RT-N16 authpriv.warn dropbear[4821]: Login attempt for nonexistent user from ::ffff:212.156.50.14:38588
Jul 7 05:54:38 RT-N16 authpriv.info dropbear[4821]: Exit before auth: Disconnect received
Jul 7 05:55:46 RT-N16 authpriv.info dropbear[4848]: Child connection from ::ffff:212.156.50.14:56676
Jul 7 05:55:47 RT-N16 authpriv.warn dropbear[4848]: Login attempt for nonexistent user from ::ffff:212.156.50.14:56676
Jul 7 05:55:47 RT-N16 authpriv.info dropbear[4848]: Exit before auth: Disconnect received
Jul 7 05:56:55 RT-N16 authpriv.info dropbear[4876]: Child connection from ::ffff:212.156.50.14:34573
Jul 7 05:56:56 RT-N16 authpriv.warn dropbear[4876]: Login attempt for nonexistent user from ::ffff:212.156.50.14:34573
Jul 7 05:56:57 RT-N16 authpriv.info dropbear[4876]: Exit before auth: Disconnect received
Jul 7 05:58:05 RT-N16 authpriv.info dropbear[4904]: Child connection from ::ffff:212.156.50.14:55233
Jul 7 05:58:06 RT-N16 authpriv.warn dropbear[4904]: Login attempt for nonexistent user from ::ffff:212.156.50.14:55233
Jul 7 05:58:07 RT-N16 authpriv.info dropbear[4904]: Exit before auth: Disconnect received
Jul 7 05:59:06 RT-N16 authpriv.info dropbear[4927]: Child connection from ::ffff:212.156.50.14:48511
Jul 7 05:59:07 RT-N16 authpriv.warn dropbear[4927]: Login attempt for nonexistent user from ::ffff:212.156.50.14:48511
Jul 7 05:59:08 RT-N16 authpriv.info dropbear[4927]: Exit before auth: Disconnect received
Jul 7 06:00:01 RT-N16 syslog.info root: -- MARK --
Jul 7 06:00:15 RT-N16 authpriv.info dropbear[4957]: Child connection from ::ffff:212.156.50.14:41754
Jul 7 06:00:17 RT-N16 authpriv.warn dropbear[4957]: Login attempt for nonexistent user from ::ffff:212.156.50.14:41754
Jul 7 06:00:17 RT-N16 authpriv.info dropbear[4957]: Exit before auth: Disconnect received
Jul 7 06:01:25 RT-N16 authpriv.info dropbear[4984]: Child connection from ::ffff:212.156.50.14:58483
Jul 7 06:01:27 RT-N16 authpriv.warn dropbear[4984]: Login attempt for nonexistent user from ::ffff:212.156.50.14:58483
Jul 7 06:01:27 RT-N16 authpriv.info dropbear[4984]: Exit before auth: Disconnect received
Jul 7 06:02:35 RT-N16 authpriv.info dropbear[5011]: Child connection from ::ffff:212.156.50.14:37924
Jul 7 06:02:36 RT-N16 authpriv.warn dropbear[5011]: Login attempt for nonexistent user from ::ffff:212.156.50.14:37924
Jul 7 06:02:37 RT-N16 authpriv.info dropbear[5011]: Exit before auth: Disconnect received
Jul 7 06:03:45 RT-N16 authpriv.info dropbear[5039]: Child connection from ::ffff:212.156.50.14:57051
Jul 7 06:03:46 RT-N16 authpriv.warn dropbear[5039]: Login attempt for nonexistent user from ::ffff:212.156.50.14:57051
Jul 7 06:03:47 RT-N16 authpriv.info dropbear[5039]: Exit before auth: Disconnect received
Jul 7 06:04:55 RT-N16 authpriv.info dropbear[5066]: Child connection from ::ffff:212.156.50.14:39557
Jul 7 06:04:56 RT-N16 authpriv.warn dropbear[5066]: Login attempt for nonexistent user from ::ffff:212.156.50.14:39557
Jul 7 06:04:57 RT-N16 authpriv.info dropbear[5066]: Exit before auth: Disconnect received
Jul 7 06:06:05 RT-N16 authpriv.info dropbear[5093]: Child connection from ::ffff:212.156.50.14:32039
Jul 7 06:06:06 RT-N16 authpriv.warn dropbear[5093]: Login attempt for nonexistent user from ::ffff:212.156.50.14:32039
Jul 7 06:06:07 RT-N16 authpriv.info dropbear[5093]: Exit before auth: Disconnect received
Jul 7 06:07:14 RT-N16 authpriv.info dropbear[5120]: Child connection from ::ffff:212.156.50.14:58121
Jul 7 06:07:15 RT-N16 authpriv.warn dropbear[5120]: Login attempt for nonexistent user from ::ffff:212.156.50.14:58121
Jul 7 06:07:16 RT-N16 authpriv.info dropbear[5120]: Exit before auth: Disconnect received
Jul 7 06:08:23 RT-N16 authpriv.info dropbear[5147]: Child connection from ::ffff:212.156.50.14:39858
Jul 7 06:08:24 RT-N16 authpriv.warn dropbear[5147]: Login attempt for nonexistent user from ::ffff:212.156.50.14:39858
Jul 7 06:08:25 RT-N16 authpriv.info dropbear[5147]: Exit before auth: Disconnect received
Jul 7 06:09:32 RT-N16 authpriv.info dropbear[5174]: Child connection from ::ffff:212.156.50.14:51802
Jul 7 06:09:33 RT-N16 authpriv.warn dropbear[5174]: Login attempt for nonexistent user from ::ffff:212.156.50.14:51802
Jul 7 06:09:34 RT-N16 authpriv.info dropbear[5174]: Exit before auth: Disconnect received
Jul 7 06:10:42 RT-N16 authpriv.info dropbear[5202]: Child connection from ::ffff:212.156.50.14:52243
Jul 7 06:10:43 RT-N16 authpriv.warn dropbear[5202]: Login attempt for nonexistent user from ::ffff:212.156.50.14:52243
Jul 7 06:10:44 RT-N16 authpriv.info dropbear[5202]: Exit before auth: Disconnect received
Jul 7 06:11:51 RT-N16 authpriv.info dropbear[5228]: Child connection from ::ffff:212.156.50.14:53134
Jul 7 06:11:52 RT-N16 authpriv.warn dropbear[5228]: Login attempt for nonexistent user from ::ffff:212.156.50.14:53134
Jul 7 06:11:53 RT-N16 authpriv.info dropbear[5228]: Exit before auth: Disconnect received
Jul 7 06:13:00 RT-N16 authpriv.info dropbear[5254]: Child connection from ::ffff:212.156.50.14:57386
Jul 7 06:13:01 RT-N16 authpriv.warn dropbear[5254]: Login attempt for nonexistent user from ::ffff:212.156.50.14:57386
Jul 7 06:13:02 RT-N16 authpriv.info dropbear[5254]: Exit before auth: Disconnect received
Jul 7 06:14:09 RT-N16 authpriv.info dropbear[5280]: Child connection from ::ffff:212.156.50.14:38107
Jul 7 06:14:10 RT-N16 authpriv.warn dropbear[5280]: Login attempt for nonexistent user from ::ffff:212.156.50.14:38107
Jul 7 06:14:11 RT-N16 authpriv.info dropbear[5280]: Exit before auth: Disconnect received
Jul 7 06:15:18 RT-N16 authpriv.info dropbear[5308]: Child connection from ::ffff:212.156.50.14:49848
Jul 7 06:15:19 RT-N16 authpriv.warn dropbear[5308]: Bad password attempt for 'root' from ::ffff:212.156.50.14:49848
Jul 7 06:15:20 RT-N16 authpriv.info dropbear[5308]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:16:27 RT-N16 authpriv.info dropbear[5335]: Child connection from ::ffff:212.156.50.14:36106
Jul 7 06:16:29 RT-N16 authpriv.warn dropbear[5335]: Login attempt for nonexistent user from ::ffff:212.156.50.14:36106
Jul 7 06:16:29 RT-N16 authpriv.info dropbear[5335]: Exit before auth: Disconnect received
Jul 7 06:17:36 RT-N16 authpriv.info dropbear[5362]: Child connection from ::ffff:212.156.50.14:38850
Jul 7 06:17:38 RT-N16 authpriv.warn dropbear[5362]: Login attempt for nonexistent user from ::ffff:212.156.50.14:38850
Jul 7 06:17:38 RT-N16 authpriv.info dropbear[5362]: Exit before auth: Disconnect received
Jul 7 06:18:44 RT-N16 authpriv.info dropbear[5389]: Child connection from ::ffff:212.156.50.14:54670
Jul 7 06:18:46 RT-N16 authpriv.warn dropbear[5389]: Login attempt for nonexistent user from ::ffff:212.156.50.14:54670
Jul 7 06:18:47 RT-N16 authpriv.info dropbear[5389]: Exit before auth: Disconnect received
Jul 7 06:19:53 RT-N16 authpriv.info dropbear[5415]: Child connection from ::ffff:212.156.50.14:60471
Jul 7 06:19:54 RT-N16 authpriv.warn dropbear[5415]: Login attempt for nonexistent user from ::ffff:212.156.50.14:60471
Jul 7 06:19:55 RT-N16 authpriv.info dropbear[5415]: Exit before auth: Disconnect received
Jul 7 06:21:02 RT-N16 authpriv.info dropbear[5442]: Child connection from ::ffff:212.156.50.14:37592
Jul 7 06:21:03 RT-N16 authpriv.warn dropbear[5442]: Bad password attempt for 'root' from ::ffff:212.156.50.14:37592
Jul 7 06:21:03 RT-N16 authpriv.info dropbear[5442]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:22:10 RT-N16 authpriv.info dropbear[5470]: Child connection from ::ffff:212.156.50.14:33340
Jul 7 06:22:12 RT-N16 authpriv.warn dropbear[5470]: Bad password attempt for 'root' from ::ffff:212.156.50.14:33340
Jul 7 06:22:12 RT-N16 authpriv.info dropbear[5470]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:23:19 RT-N16 authpriv.info dropbear[5496]: Child connection from ::ffff:212.156.50.14:52960
Jul 7 06:23:20 RT-N16 authpriv.warn dropbear[5496]: Login attempt for nonexistent user from ::ffff:212.156.50.14:52960
Jul 7 06:23:21 RT-N16 authpriv.info dropbear[5496]: Exit before auth: Disconnect received
Jul 7 06:24:27 RT-N16 authpriv.info dropbear[5524]: Child connection from ::ffff:212.156.50.14:58007
Jul 7 06:24:28 RT-N16 authpriv.warn dropbear[5524]: Login attempt for nonexistent user from ::ffff:212.156.50.14:58007
Jul 7 06:24:29 RT-N16 authpriv.info dropbear[5524]: Exit before auth: Disconnect received
Jul 7 06:25:36 RT-N16 authpriv.info dropbear[5550]: Child connection from ::ffff:212.156.50.14:60214
Jul 7 06:25:38 RT-N16 authpriv.warn dropbear[5550]: Bad password attempt for 'root' from ::ffff:212.156.50.14:60214
Jul 7 06:25:38 RT-N16 authpriv.info dropbear[5550]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:26:45 RT-N16 authpriv.info dropbear[5577]: Child connection from ::ffff:212.156.50.14:56178
Jul 7 06:26:46 RT-N16 authpriv.warn dropbear[5577]: Bad password attempt for 'root' from ::ffff:212.156.50.14:56178
Jul 7 06:26:47 RT-N16 authpriv.info dropbear[5577]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:27:54 RT-N16 authpriv.info dropbear[5604]: Child connection from ::ffff:212.156.50.14:57115
Jul 7 06:27:55 RT-N16 authpriv.warn dropbear[5604]: Bad password attempt for 'root' from ::ffff:212.156.50.14:57115
Jul 7 06:27:55 RT-N16 authpriv.info dropbear[5604]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:29:02 RT-N16 authpriv.info dropbear[5630]: Child connection from ::ffff:212.156.50.14:34765
Jul 7 06:29:04 RT-N16 authpriv.warn dropbear[5630]: Bad password attempt for 'root' from ::ffff:212.156.50.14:34765
Jul 7 06:29:04 RT-N16 authpriv.info dropbear[5630]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:30:11 RT-N16 authpriv.info dropbear[5657]: Child connection from ::ffff:212.156.50.14:60815
Jul 7 06:30:12 RT-N16 authpriv.warn dropbear[5657]: Bad password attempt for 'root' from ::ffff:212.156.50.14:60815
Jul 7 06:30:13 RT-N16 authpriv.info dropbear[5657]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:30:51 RT-N16 daemon.info dnsmasq-dhcp[2892]: DHCPINFORM(br0) 192.168.2.100 00:50:da:e0:ce:8d
Jul 7 06:30:51 RT-N16 daemon.info dnsmasq-dhcp[2892]: DHCPACK(br0) 192.168.2.100 00:50:da:e0:ce:8d stacjonar
Jul 7 06:31:20 RT-N16 authpriv.info dropbear[5684]: Child connection from ::ffff:212.156.50.14:55703
Jul 7 06:31:21 RT-N16 authpriv.warn dropbear[5684]: Bad password attempt for 'root' from ::ffff:212.156.50.14:55703
Jul 7 06:31:21 RT-N16 authpriv.info dropbear[5684]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:32:28 RT-N16 authpriv.info dropbear[5711]: Child connection from ::ffff:212.156.50.14:59443
Jul 7 06:32:29 RT-N16 authpriv.warn dropbear[5711]: Bad password attempt for 'root' from ::ffff:212.156.50.14:59443
Jul 7 06:32:30 RT-N16 authpriv.info dropbear[5711]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:33:37 RT-N16 authpriv.info dropbear[5738]: Child connection from ::ffff:212.156.50.14:53983
Jul 7 06:33:38 RT-N16 authpriv.warn dropbear[5738]: Bad password attempt for 'root' from ::ffff:212.156.50.14:53983
Jul 7 06:33:39 RT-N16 authpriv.info dropbear[5738]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:34:45 RT-N16 authpriv.info dropbear[5765]: Child connection from ::ffff:212.156.50.14:56976
Jul 7 06:34:47 RT-N16 authpriv.warn dropbear[5765]: Bad password attempt for 'root' from ::ffff:212.156.50.14:56976
Jul 7 06:34:47 RT-N16 authpriv.info dropbear[5765]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:35:54 RT-N16 authpriv.info dropbear[5792]: Child connection from ::ffff:212.156.50.14:35141
Jul 7 06:35:55 RT-N16 authpriv.warn dropbear[5792]: Bad password attempt for 'root' from ::ffff:212.156.50.14:35141
Jul 7 06:35:56 RT-N16 authpriv.info dropbear[5792]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:37:03 RT-N16 authpriv.info dropbear[5818]: Child connection from ::ffff:212.156.50.14:52648
Jul 7 06:37:04 RT-N16 authpriv.warn dropbear[5818]: Bad password attempt for 'root' from ::ffff:212.156.50.14:52648
Jul 7 06:37:04 RT-N16 authpriv.info dropbear[5818]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:38:11 RT-N16 authpriv.info dropbear[5846]: Child connection from ::ffff:212.156.50.14:32330
Jul 7 06:38:12 RT-N16 authpriv.warn dropbear[5846]: Bad password attempt for 'root' from ::ffff:212.156.50.14:32330
Jul 7 06:38:13 RT-N16 authpriv.info dropbear[5846]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:39:20 RT-N16 authpriv.info dropbear[5872]: Child connection from ::ffff:212.156.50.14:32497
Jul 7 06:39:21 RT-N16 authpriv.warn dropbear[5872]: Bad password attempt for 'root' from ::ffff:212.156.50.14:32497
Jul 7 06:39:21 RT-N16 authpriv.info dropbear[5872]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:40:28 RT-N16 authpriv.info dropbear[5899]: Child connection from ::ffff:212.156.50.14:41641
Jul 7 06:40:29 RT-N16 authpriv.warn dropbear[5899]: Bad password attempt for 'root' from ::ffff:212.156.50.14:41641
Jul 7 06:40:30 RT-N16 authpriv.info dropbear[5899]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:41:37 RT-N16 authpriv.info dropbear[5926]: Child connection from ::ffff:212.156.50.14:44276
Jul 7 06:41:39 RT-N16 authpriv.warn dropbear[5926]: Login attempt for nonexistent user from ::ffff:212.156.50.14:44276
Jul 7 06:41:39 RT-N16 authpriv.info dropbear[5926]: Exit before auth: Disconnect received
Jul 7 06:42:46 RT-N16 authpriv.info dropbear[5953]: Child connection from ::ffff:212.156.50.14:30354
Jul 7 06:42:47 RT-N16 authpriv.warn dropbear[5953]: Login attempt for nonexistent user from ::ffff:212.156.50.14:30354
Jul 7 06:42:48 RT-N16 authpriv.info dropbear[5953]: Exit before auth: Disconnect received
Jul 7 06:43:55 RT-N16 authpriv.info dropbear[5981]: Child connection from ::ffff:212.156.50.14:41788
Jul 7 06:43:56 RT-N16 authpriv.warn dropbear[5981]: Login attempt for nonexistent user from ::ffff:212.156.50.14:41788
Jul 7 06:43:57 RT-N16 authpriv.info dropbear[5981]: Exit before auth: Disconnect received
Jul 7 06:45:03 RT-N16 authpriv.info dropbear[6007]: Child connection from ::ffff:212.156.50.14:30199
Jul 7 06:45:04 RT-N16 authpriv.warn dropbear[6007]: Login attempt for nonexistent user from ::ffff:212.156.50.14:30199
Jul 7 06:45:05 RT-N16 authpriv.info dropbear[6007]: Exit before auth: Disconnect received
Jul 7 06:46:12 RT-N16 authpriv.info dropbear[6034]: Child connection from ::ffff:212.156.50.14:33091
Jul 7 06:46:13 RT-N16 authpriv.warn dropbear[6034]: Bad password attempt for 'root' from ::ffff:212.156.50.14:33091
Jul 7 06:46:14 RT-N16 authpriv.info dropbear[6034]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:47:21 RT-N16 authpriv.info dropbear[6061]: Child connection from ::ffff:212.156.50.14:42477
Jul 7 06:47:22 RT-N16 authpriv.warn dropbear[6061]: Bad password attempt for 'root' from ::ffff:212.156.50.14:42477
Jul 7 06:47:23 RT-N16 authpriv.info dropbear[6061]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:48:28 RT-N16 authpriv.info dropbear[6087]: Child connection from ::ffff:212.156.50.14:33191
Jul 7 06:48:29 RT-N16 authpriv.warn dropbear[6087]: Login attempt for nonexistent user from ::ffff:212.156.50.14:33191
Jul 7 06:48:30 RT-N16 authpriv.info dropbear[6087]: Exit before auth: Disconnect received
Jul 7 06:49:36 RT-N16 authpriv.info dropbear[6114]: Child connection from ::ffff:212.156.50.14:35403
Jul 7 06:49:37 RT-N16 authpriv.warn dropbear[6114]: Login attempt for nonexistent user from ::ffff:212.156.50.14:35403
Jul 7 06:49:38 RT-N16 authpriv.info dropbear[6114]: Exit before auth: Disconnect received
Jul 7 06:50:43 RT-N16 authpriv.info dropbear[6141]: Child connection from ::ffff:212.156.50.14:51967
Jul 7 06:50:44 RT-N16 authpriv.warn dropbear[6141]: Login attempt for nonexistent user from ::ffff:212.156.50.14:51967
Jul 7 06:50:45 RT-N16 authpriv.info dropbear[6141]: Exit before auth: Disconnect received
Jul 7 06:51:51 RT-N16 authpriv.info dropbear[6167]: Child connection from ::ffff:212.156.50.14:45822
Jul 7 06:51:52 RT-N16 authpriv.warn dropbear[6167]: Login attempt for nonexistent user from ::ffff:212.156.50.14:45822
Jul 7 06:51:53 RT-N16 authpriv.info dropbear[6167]: Exit before auth: Disconnect received
Jul 7 06:52:58 RT-N16 authpriv.info dropbear[6192]: Child connection from ::ffff:212.156.50.14:45722
Jul 7 06:52:59 RT-N16 authpriv.warn dropbear[6192]: Login attempt for nonexistent user from ::ffff:212.156.50.14:45722
Jul 7 06:53:00 RT-N16 authpriv.info dropbear[6192]: Exit before auth: Disconnect received
Jul 7 06:54:05 RT-N16 authpriv.info dropbear[6219]: Child connection from ::ffff:212.156.50.14:48468
Jul 7 06:54:07 RT-N16 authpriv.warn dropbear[6219]: Login attempt for nonexistent user from ::ffff:212.156.50.14:48468
Jul 7 06:54:08 RT-N16 authpriv.info dropbear[6219]: Exit before auth: Disconnect received
Jul 7 06:55:13 RT-N16 authpriv.info dropbear[6245]: Child connection from ::ffff:212.156.50.14:56584
Jul 7 06:55:14 RT-N16 authpriv.warn dropbear[6245]: Login attempt for nonexistent user from ::ffff:212.156.50.14:56584
Jul 7 06:55:15 RT-N16 authpriv.info dropbear[6245]: Exit before auth: Disconnect received
Jul 7 06:56:20 RT-N16 authpriv.info dropbear[6271]: Child connection from ::ffff:212.156.50.14:59611
Jul 7 06:56:22 RT-N16 authpriv.warn dropbear[6271]: Bad password attempt for 'root' from ::ffff:212.156.50.14:59611
Jul 7 06:56:22 RT-N16 authpriv.info dropbear[6271]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 06:57:28 RT-N16 authpriv.info dropbear[6298]: Child connection from ::ffff:212.156.50.14:37508
Jul 7 06:57:29 RT-N16 authpriv.warn dropbear[6298]: Login attempt for nonexistent user from ::ffff:212.156.50.14:37508
Jul 7 06:57:30 RT-N16 authpriv.info dropbear[6298]: Exit before auth: Disconnect received
Jul 7 06:58:35 RT-N16 authpriv.info dropbear[6325]: Child connection from ::ffff:212.156.50.14:31034
Jul 7 06:58:36 RT-N16 authpriv.warn dropbear[6325]: Login attempt for nonexistent user from ::ffff:212.156.50.14:31034
Jul 7 06:58:37 RT-N16 authpriv.info dropbear[6325]: Exit before auth: Disconnect received
Jul 7 06:59:42 RT-N16 authpriv.info dropbear[6352]: Child connection from ::ffff:212.156.50.14:57829
Jul 7 06:59:44 RT-N16 authpriv.warn dropbear[6352]: Bad password attempt for 'root' from ::ffff:212.156.50.14:57829
Jul 7 06:59:44 RT-N16 authpriv.info dropbear[6352]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 07:00:01 RT-N16 syslog.info root: -- MARK --
Jul 7 07:00:50 RT-N16 authpriv.info dropbear[6380]: Child connection from ::ffff:212.156.50.14:43394
Jul 7 07:00:51 RT-N16 authpriv.warn dropbear[6380]: Bad password attempt for 'root' from ::ffff:212.156.50.14:43394
Jul 7 07:00:52 RT-N16 authpriv.info dropbear[6380]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 07:01:57 RT-N16 authpriv.info dropbear[6406]: Child connection from ::ffff:212.156.50.14:41207
Jul 7 07:01:58 RT-N16 authpriv.warn dropbear[6406]: Bad password attempt for 'root' from ::ffff:212.156.50.14:41207
Jul 7 07:01:59 RT-N16 authpriv.info dropbear[6406]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 07:03:04 RT-N16 authpriv.info dropbear[6432]: Child connection from ::ffff:212.156.50.14:50366
Jul 7 07:03:06 RT-N16 authpriv.warn dropbear[6432]: Bad password attempt for 'root' from ::ffff:212.156.50.14:50366
Jul 7 07:03:06 RT-N16 authpriv.info dropbear[6432]: Exit before auth (user 'root', 1 fails): Disconnect received
Jul 7 07:04:12 RT-N16 authpriv.info dropbear[6459]: Child connection from ::ffff:212.156.50.14:42851
Jul 7 07:04:13 RT-N16 authpriv.warn dropbear[6459]: Login attempt for nonexistent user from ::ffff:212.156.50.14:42851
Jul 7 07:04:14 RT-N16 authpriv.info dropbear[6459]: Exit before auth: Disconnect received
Jul 7 07:05:19 RT-N16 authpriv.info dropbear[6485]: Child connection from ::ffff:212.156.50.14:30485
Jul 7 07:05:20 RT-N16 authpriv.warn dropbear[6485]: Login attempt for nonexistent user from ::ffff:212.156.50.14:30485
Jul 7 07:05:21 RT-N16 authpriv.info dropbear[6485]: Exit before auth: Disconnect received
Jul 7 07:06:25 RT-N16 authpriv.info dropbear[6511]: Child connection from ::ffff:212.156.50.14:43444
Jul 7 07:06:27 RT-N16 authpriv.warn dropbear[6511]: Login attempt for nonexistent user from ::ffff:212.156.50.14:43444
Jul 7 07:06:27 RT-N16 authpriv.info dropbear[6511]: Exit before auth: Disconnect received
Jul 7 07:07:32 RT-N16 authpriv.info dropbear[6538]: Child connection from ::ffff:212.156.50.14:55380
Jul 7 07:07:33 RT-N16 authpriv.warn dropbear[6538]: Login attempt for nonexistent user from ::ffff:212.156.50.14:55380
Jul 7 07:07:34 RT-N16 authpriv.info dropbear[6538]: Exit before auth: Disconnect received
Jul 7 07:08:39 RT-N16 authpriv.info dropbear[6564]: Child connection from ::ffff:212.156.50.14:28685
Jul 7 07:08:40 RT-N16 authpriv.warn dropbear[6564]: Login attempt for nonexistent user from ::ffff:212.156.50.14:28685
Jul 7 07:08:41 RT-N16 authpriv.info dropbear[6564]: Exit before auth: Disconnect received
Jul 7 07:09:46 RT-N16 authpriv.info dropbear[6590]: Child connection from ::ffff:212.156.50.14:48822
Jul 7 07:09:47 RT-N16 authpriv.warn dropbear[6590]: Login attempt for nonexistent user from ::ffff:212.156.50.14:48822
Jul 7 07:09:48 RT-N16 authpriv.info dropbear[6590]: Exit before auth: Disconnect received
Jul 7 07:10:53 RT-N16 authpriv.info dropbear[6616]: Child connection from ::ffff:212.156.50.14:57689
Jul 7 07:10:54 RT-N16 authpriv.warn dropbear[6616]: Login attempt for nonexistent user from ::ffff:212.156.50.14:57689
Jul 7 07:10:55 RT-N16 authpriv.info dropbear[6616]: Exit before auth: Disconnect received
Jul 7 07:12:00 RT-N16 authpriv.info dropbear[6643]: Child connection from ::ffff:212.156.50.14:42180
Jul 7 07:12:01 RT-N16 authpriv.warn dropbear[6643]: Login attempt for nonexistent user from ::ffff:212.156.50.14:42180
Jul 7 07:12:02 RT-N16 authpriv.info dropbear[6643]: Exit before auth: Disconnect received
Jul 7 07:13:07 RT-N16 authpriv.info dropbear[6669]: Child connection from ::ffff:212.156.50.14:51064
Jul 7 07:13:08 RT-N16 authpriv.warn dropbear[6669]: Login attempt for nonexistent user from ::ffff:212.156.50.14:51064
Jul 7 07:13:09 RT-N16 authpriv.info dropbear[6669]: Exit before auth: Disconnect received
Jul 7 07:14:13 RT-N16 authpriv.info dropbear[6695]: Child connection from ::ffff:212.156.50.14:38169
Jul 7 07:14:15 RT-N16 authpriv.warn dropbear[6695]: Login attempt for nonexistent user from ::ffff:212.156.50.14:38169
Jul 7 07:14:15 RT-N16 authpriv.info dropbear[6695]: Exit before auth: Disconnect received
Jul 7 07:15:21 RT-N16 authpriv.info dropbear[6722]: Child connection from ::ffff:212.156.50.14:54213
Jul 7 07:15:22 RT-N16 authpriv.warn dropbear[6722]: Login attempt for nonexistent user from ::ffff:212.156.50.14:54213
Jul 7 07:15:23 RT-N16 authpriv.info dropbear[6722]: Exit before auth: Disconnect received
Jul 7 07:16:27 RT-N16 authpriv.info dropbear[6748]: Child connection from ::ffff:212.156.50.14:29912
Jul 7 07:16:29 RT-N16 authpriv.warn dropbear[6748]: Bad password attempt for 'nobody' from ::ffff:212.156.50.14:29912
Jul 7 07:16:29 RT-N16 authpriv.info dropbear[6748]: Exit before auth (user 'nobody', 1 fails): Disconnect received
Jul 7 07:18:46 RT-N16 authpriv.info dropbear[6801]: Child connection from ::ffff:212.156.50.14:31033
Jul 7 07:18:47 RT-N16 authpriv.warn dropbear[6801]: Login attempt for nonexistent user from ::ffff:212.156.50.14:31033
Jul 7 07:18:48 RT-N16 authpriv.info dropbear[6801]: Exit before auth: Disconnect received
Jul 7 07:19:53 RT-N16 authpriv.info dropbear[6828]: Child connection from ::ffff:212.156.50.14:40932
Jul 7 07:19:54 RT-N16 authpriv.warn dropbear[6828]: Login attempt for nonexistent user from ::ffff:212.156.50.14:40932
Jul 7 07:19:55 RT-N16 authpriv.info dropbear[6828]: Exit before auth: Disconnect received
Jul 7 07:21:00 RT-N16 authpriv.info dropbear[6853]: Child connection from ::ffff:212.156.50.14:43918
Jul 7 07:21:01 RT-N16 authpriv.warn dropbear[6853]: Login attempt for nonexistent user from ::ffff:212.156.50.14:43918
Jul 7 07:21:02 RT-N16 authpriv.info dropbear[6853]: Exit before auth: Disconnect received
Jul 7 07:22:07 RT-N16 authpriv.info dropbear[6880]: Child connection from ::ffff:212.156.50.14:47305
Jul 7 07:22:08 RT-N16 authpriv.warn dropbear[6880]: Login attempt for nonexistent user from ::ffff:212.156.50.14:47305
Jul 7 07:22:09 RT-N16 authpriv.info dropbear[6880]: Exit before auth: Disconnect received
Jul 7 07:24:29 RT-N16 authpriv.info dropbear[6934]: Child connection from ::ffff:212.156.50.14:59190
Jul 7 07:24:30 RT-N16 authpriv.warn dropbear[6934]: Login attempt for nonexistent user from ::ffff:212.156.50.14:59190
Jul 7 07:24:31 RT-N16 authpriv.info dropbear[6934]: Exit before auth: Disconnect received
Jul 7 07:25:36 RT-N16 authpriv.info dropbear[6961]: Child connection from ::ffff:212.156.50.14:52689
Jul 7 07:25:37 RT-N16 authpriv.warn dropbear[6961]: Login attempt for nonexistent user from ::ffff:212.156.50.14:52689
Jul 7 07:25:38 RT-N16 authpriv.info dropbear[6961]: Exit before auth: Disconnect received
Jul 7 07:26:43 RT-N16 authpriv.info dropbear[6987]: Child connection from ::ffff:212.156.50.14:52372
Jul 7 07:26:44 RT-N16 authpriv.warn dropbear[6987]: Login attempt for nonexistent user from ::ffff:212.156.50.14:52372
Jul 7 07:26:45 RT-N16 authpriv.info dropbear[6987]: Exit before auth: Disconnect received
Jul 7 07:27:49 RT-N16 authpriv.info dropbear[7013]: Child connection from ::ffff:212.156.50.14:39732
Jul 7 07:27:51 RT-N16 authpriv.warn dropbear[7013]: Login attempt for nonexistent user from ::ffff:212.156.50.14:39732
Jul 7 07:27:52 RT-N16 authpriv.info dropbear[7013]: Exit before auth: Disconnect received
Jul 7 07:29:01 RT-N16 authpriv.info dropbear[7042]: Child connection from ::ffff:212.156.50.14:29160
Jul 7 07:29:02 RT-N16 authpriv.info dropbear[7042]: Exit before auth: Exited normally
Jul 7 07:30:03 RT-N16 authpriv.info dropbear[7066]: Child connection from ::ffff:212.156.50.14:36747
Jul 7 07:30:04 RT-N16 authpriv.warn dropbear[7066]: Login attempt for nonexistent user from ::ffff:212.156.50.14:36747
Jul 7 07:30:05 RT-N16 authpriv.info dropbear[7066]: Exit before auth: Disconnect received
Jul 7 07:31:10 RT-N16 authpriv.info dropbear[7092]: Child connection from ::ffff:212.156.50.14:40945
Jul 7 07:31:11 RT-N16 authpriv.warn dropbear[7092]: Login attempt for nonexistent user from ::ffff:212.156.50.14:40945
Jul 7 07:31:12 RT-N16 authpriv.info dropbear[7092]: Exit before auth: Disconnect received
Jul 7 07:32:17 RT-N16 authpriv.info dropbear[7118]: Child connection from ::ffff:212.156.50.14:33202
Jul 7 07:32:18 RT-N16 authpriv.warn dropbear[7118]: Login attempt for nonexistent user from ::ffff:212.156.50.14:33202
Jul 7 07:32:19 RT-N16 authpriv.info dropbear[7118]: Exit before auth: Disconnect received
Jul 7 07:33:24 RT-N16 authpriv.info dropbear[7144]: Child connection from ::ffff:212.156.50.14:45159
Jul 7 07:33:25 RT-N16 authpriv.warn dropbear[7144]: Login attempt for nonexistent user from ::ffff:212.156.50.14:45159
Jul 7 07:33:26 RT-N16 authpriv.info dropbear[7144]: Exit before auth: Disconnect received
Jul 7 07:34:31 RT-N16 authpriv.info dropbear[7171]: Child connection from ::ffff:212.156.50.14:52239
Jul 7 07:34:32 RT-N16 authpriv.warn dropbear[7171]: Login attempt for nonexistent user from ::ffff:212.156.50.14:52239
Jul 7 07:34:33 RT-N16 authpriv.info dropbear[7171]: Exit before auth: Disconnect received
Jul 7 07:35:37 RT-N16 authpriv.info dropbear[7198]: Child connection from ::ffff:212.156.50.14:43197
Jul 7 07:35:38 RT-N16 authpriv.warn dropbear[7198]: Login attempt for nonexistent user from ::ffff:212.156.50.14:43197
Jul 7 07:35:39 RT-N16 authpriv.info dropbear[7198]: Exit before auth: Disconnect received
Jul 7 07:36:44 RT-N16 authpriv.info dropbear[7224]: Child connection from ::ffff:212.156.50.14:33266
Jul 7 07:36:45 RT-N16 authpriv.warn dropbear[7224]: Login attempt for nonexistent user from ::ffff:212.156.50.14:33266
Jul 7 07:36:46 RT-N16 authpriv.info dropbear[7224]: Exit before auth: Disconnect received
Jul 7 07:37:51 RT-N16 authpriv.info dropbear[7251]: Child connection from ::ffff:212.156.50.14:50106
Jul 7 07:37:52 RT-N16 authpriv.warn dropbear[7251]: Login attempt for nonexistent user from ::ffff:212.156.50.14:50106
Jul 7 07:37:53 RT-N16 authpriv.info dropbear[7251]: Exit before auth: Disconnect received
Jul 7 07:38:58 RT-N16 authpriv.info dropbear[7277]: Child connection from ::ffff:212.156.50.14:33891
Jul 7 07:38:59 RT-N16 authpriv.warn dropbear[7277]: Login attempt for nonexistent user from ::ffff:212.156.50.14:33891
Jul 7 07:39:00 RT-N16 authpriv.info dropbear[7277]: Exit before auth: Disconnect received
Jul 7 07:40:05 RT-N16 authpriv.info dropbear[7303]: Child connection from ::ffff:212.156.50.14:59907
Jul 7 07:40:06 RT-N16 authpriv.warn dropbear[7303]: Login attempt for nonexistent user from ::ffff:212.156.50.14:59907
Jul 7 07:40:07 RT-N16 authpriv.info dropbear[7303]: Exit before auth: Disconnect received
Edytowany przez naiLo dnia 07-07-2011 21:04
Powered by ASUS RT-N16 + Tomato Firmware 1.28.0000 MIPSR2-084V K26 USB AIO + SAMSUNG S2 PORTABLE 1TB
|
| |
|
|
| iroc |
Dodano 07-07-2011 21:00
|
OL Maniac
Posty: 1457
Dołączył: 10/06/2006 18:29
|
"Pruba" nie, ale próba tak. Widać jakby ktoś lub "coś" dobijało się na różnych portach.
-asus rt-n18u-
tomato,ddwrt,gargoyle |
| |
|
|
| shibby |
Dodano 08-07-2011 09:33
|
SysOp
Posty: 17166
Dołączył: 15/01/2009 20:30
|
nie skanuje, tylko probuje zalogowac sie na ssh. Porty przy ipku to port zródłowy a nie docelowy.
naiLo włącz sobie w administration -> admin access -> Limit Connection Attempts dla SSH na 3,60 i bedziesz mial po kłopocie.
Router: Unifi Cloud Gateway Fiber
Switch: Unifi USW-Lite-16-PoE
Switch: Unifi USW-Flex-Mini - szt. 2
Wi-Fi: Unifi U6-Lite - szt. 2
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 4x 2TB SSD
VM #1: Synology SA6400
VM #2: Debian, WWW
VM #3: Home Assistant OS
|
| |
|
|
| naiLo |
Dodano 08-07-2011 10:24
|
User
Posty: 64
Dołączył: 16/09/2006 09:42
|
tak mam ustawione, chyba domyślnie od ciebie
dzięki za info
Powered by ASUS RT-N16 + Tomato Firmware 1.28.0000 MIPSR2-084V K26 USB AIO + SAMSUNG S2 PORTABLE 1TB
|
| |
|
|
| shibby |
Dodano 08-07-2011 12:03
|
SysOp
Posty: 17166
Dołączył: 15/01/2009 20:30
|
no to dziwne ze go nie zablokowalo po 3 nieudanych probach. Po 3 próbach powinein dostac bana na 60sek. Powinno to wystarczyc na odstraszenie bota. Chyba ze był taki uparty i po 60sek probował znow 
Router: Unifi Cloud Gateway Fiber
Switch: Unifi USW-Lite-16-PoE
Switch: Unifi USW-Flex-Mini - szt. 2
Wi-Fi: Unifi U6-Lite - szt. 2
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 4x 2TB SSD
VM #1: Synology SA6400
VM #2: Debian, WWW
VM #3: Home Assistant OS
|
| |
|
|
| iroc |
Dodano 08-07-2011 12:50
|
OL Maniac
Posty: 1457
Dołączył: 10/06/2006 18:29
|
Chyba że naiLo nie ustawił tego poprawnie, albo ta opcja nie działa prawidłowo u niego.
Bo u mnie jak ptaszek jest na ssh oraz telnet nie działa dostęp zdalny, ale jak ptaszek jest na samym ssh jest okej czyli ssh działa.
edit: ponownie odznaczone i ponowne zaznaczone ssh i telnet -->save, działa OK dostęp jest. Ale po 3 próbach źle wpisanego hasła nadal działa połączenie, jak jest u Was ?
Edytowany przez iroc dnia 08-07-2011 12:58
-asus rt-n18u-
tomato,ddwrt,gargoyle |
| |
|
|
| shibby |
Dodano 08-07-2011 13:56
|
SysOp
Posty: 17166
Dołączył: 15/01/2009 20:30
|
wylacz Remote Forwarding dla ssh
polacz sie przez putty i wpisuj rozne hasla po 3-4 próbach sie rozlaczy (rozlaczenie jest liczone jako 1)
polacz sie ponownie i znow wpisuj bledne hasla, znow cie kompie (rozlaczenie nr 2)
polacz sie ponownie i znow wpisuj bledne hasla, znow cie kompie ( rozlaczenie nr 3)
sprobuj znow sie polaczyc i juz ci sie nie uda. Masz bana na 60sek.
tak wiec mozna ustawic nawet na 1 / 60 tak by po jednym kopnieciu (czyli ok 3-4 probach) juz dawal bana.
Router: Unifi Cloud Gateway Fiber
Switch: Unifi USW-Lite-16-PoE
Switch: Unifi USW-Flex-Mini - szt. 2
Wi-Fi: Unifi U6-Lite - szt. 2
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 4x 2TB SSD
VM #1: Synology SA6400
VM #2: Debian, WWW
VM #3: Home Assistant OS
|
| |
|
|
| naiLo |
Dodano 08-07-2011 14:07
|
User
Posty: 64
Dołączył: 16/09/2006 09:42
|
no to dziwne bo mnie dopiero po 10 blednych haslach rozłączył
a mam ustawione jak mowisz 3every 6sec
Jul 8 14:03:26 RT-N16 authpriv.info dropbear[13439]: Child connection from ::ffff:
Jul 8 14:03:34 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021
Jul 8 14:03:37 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021
Jul 8 14:03:39 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021
Jul 8 14:03:41 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021
Jul 8 14:03:43 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021
Jul 8 14:03:45 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021
Jul 8 14:03:47 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021
Jul 8 14:03:49 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021
Jul 8 14:03:51 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021
Jul 8 14:03:53 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021
Jul 8 14:03:54 RT-N16 authpriv.info dropbear[13439]: Exit before auth (user 'root', 10 fails): Max au
Powered by ASUS RT-N16 + Tomato Firmware 1.28.0000 MIPSR2-084V K26 USB AIO + SAMSUNG S2 PORTABLE 1TB
|
| |
|
|
| shibby |
Dodano 08-07-2011 14:20
|
SysOp
Posty: 17166
Dołączył: 15/01/2009 20:30
|
1 every 60 sec i zobacz wtedy. wpisuj rozne hasla 
Router: Unifi Cloud Gateway Fiber
Switch: Unifi USW-Lite-16-PoE
Switch: Unifi USW-Flex-Mini - szt. 2
Wi-Fi: Unifi U6-Lite - szt. 2
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 4x 2TB SSD
VM #1: Synology SA6400
VM #2: Debian, WWW
VM #3: Home Assistant OS
|
| |
|
|
| naiLo |
Dodano 08-07-2011 14:36
|
User
Posty: 64
Dołączył: 16/09/2006 09:42
|
to samo chyba ze ustawienia działają po restarcie
Powered by ASUS RT-N16 + Tomato Firmware 1.28.0000 MIPSR2-084V K26 USB AIO + SAMSUNG S2 PORTABLE 1TB
|
| |
|
|
| buniaczek |
Dodano 08-07-2011 14:44
|
OL Maniac
Posty: 1166
Dołączył: 28/12/2010 13:05
|
Podpinając się pod temat:
Czy jest możliwość zobaczenie w logach prób nieudanych logowań z www/ssh?
-------------------------
Netgear WNR3500L || Tomato-K26USB-1.28 RT5x MIPSR2 101V Big-VPN ||
Asus RT-N56U || Asus firmware 3.0.0.3.135 - wygrania w konkursie na openlinksys.info||
[b]Asus RT-N10U v.B1 [small]
|
| |
|
|
| shibby |
Dodano 08-07-2011 15:53
|
SysOp
Posty: 17166
Dołączył: 15/01/2009 20:30
|
dla ssh bedzie
cat /var/log/messages | grep authpriv | grep 'Bad password'
dla http nie ma logów.
Router: Unifi Cloud Gateway Fiber
Switch: Unifi USW-Lite-16-PoE
Switch: Unifi USW-Flex-Mini - szt. 2
Wi-Fi: Unifi U6-Lite - szt. 2
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 4x 2TB SSD
VM #1: Synology SA6400
VM #2: Debian, WWW
VM #3: Home Assistant OS
|
| |
|
|
| iroc |
Dodano 08-07-2011 16:32
|
OL Maniac
Posty: 1457
Dołączył: 10/06/2006 18:29
|
Dodam tylko, że osobiście tego nie używałem i tylko testnąłem. Ale skoro sprawdzone przez shibbiego to już sprawdzać nie będę
-asus rt-n18u-
tomato,ddwrt,gargoyle |
| |
|
|
| Eleonor |
Dodano 13-02-2017 14:07
|
User
Posty: 89
Dołączył: 11/07/2009 12:43
|
Witam - od jakiegoś czasu mam prawie co dziennie ,, atak ,, z takiego IP
Feb 12 20:09:13 Router authpriv.info dropbear[13575]: Child connection from 176.123.27.28:11400
Feb 12 20:09:14 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:14 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:15 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:15 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:15 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:15 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:15 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:15 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:16 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:16 Router authpriv.warn dropbear[13575]: Bad password attempt for 'root' from 176.123.27.28:11400
Feb 12 20:09:16 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:16 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:16 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:16 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:17 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:17 Router authpriv.warn dropbear[13575]: Bad password attempt for 'root' from 176.123.27.28:11400
Feb 12 20:09:17 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:17 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:17 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:17 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:18 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:18 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:18 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:18 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:18 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:18 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:19 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:19 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:19 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:19 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:19 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:20 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:20 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:20 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:20 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:20 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:20 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:21 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:21 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:21 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:21 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:21 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:21 Router authpriv.warn dropbear[13575]: Bad password attempt for 'root' from 176.123.27.28:11400
Feb 12 20:09:22 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:22 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:22 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:22 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:22 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:22 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:23 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:23 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:23 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:23 Router authpriv.warn dropbear[13575]: Bad password attempt for 'root' from 176.123.27.28:11400
Feb 12 20:09:24 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:24 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:24 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:24 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:24 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:25 Router authpriv.info dropbear[13575]: Exit before auth: Exited normally
W Admin Restrictions w Limit Connection Attempts mam zaznaczone tylko SSH oraz 1 na 3600
coś można z tym zrobić czy tak zostawić i się nie przejmować ?
Synology RT6600ax - obecnie
Netgear R7000 Tomato 2017.3-kille72 AIO - kiedyś
|
| |
|
|
| kille72 |
Dodano 13-02-2017 14:37
|
Administrator
Posty: 2986
Dołączył: 12/02/2007 23:43
|
1. Port 22? Zmien na inny, np 2222.
2. Tylko z jednego IP? Zablokuj ten IP. |
| |
|
|
| Eleonor |
Dodano 13-02-2017 16:42
|
User
Posty: 89
Dołączył: 11/07/2009 12:43
|
A jak ten jeden IP zablokować ?
Synology RT6600ax - obecnie
Netgear R7000 Tomato 2017.3-kille72 AIO - kiedyś
|
| |
|
|
| kille72 |
Dodano 13-02-2017 17:35
|
Administrator
Posty: 2986
Dołączył: 12/02/2007 23:43
|
W Administration-Scripts-Firewall wklejasz:
iptables -I INPUT -s 176.123.27.28 -j DROP
Później przeładowujesz usługę firewall:
|
| |
|
|
| Eleonor |
Dodano 16-02-2017 13:23
|
User
Posty: 89
Dołączył: 11/07/2009 12:43
|
Po zmianie portu na inny nastąpiła cisza w atakach
Synology RT6600ax - obecnie
Netgear R7000 Tomato 2017.3-kille72 AIO - kiedyś
|
| |
|
' target='_blank'>Link
