' target='_blank'>Link
23 Listopada 2024 16:30:21
Nawigacja
· Strona Główna
· Forum
· Tomato by Shibby
· FreshTomato

Wątki na forum
Najnowsze dyskusje
· [S] Asus RT-AC56U
· DIR868l OFW asus vs ...
· Szukam zaproszenia n...
· [MOD] FreshTomato-AR...
· Asus RT-AC5300 ,prob...
· archer c6 v3.20
· [S] Nighthawk R7000P...
· [S]Asus RT-AC5300 - ...
· Tanie N100 na promce...
· net z telefonu wifi+...
· Tomato - bugi/proble...
· HUAWEI z światłowodem
· Asus TUF-AX3000_V2 p...
· rt-ax88upro częste ...
· [Howto] Xpenology na...
· Jaki router pod Open...
· Ruter z tomato
· Czy to jeszcze NAS?
· RT AC66U B1
· Wireguard na FreshTo...
Najpopularniejsze obecnie wątki
· DIR868l OFW asus ... [8]
· [S] Asus RT-AC56U [0]
Ankieta
Jaki procesor posiada twój router?

Broadcom MIPSEL
Broadcom MIPSEL
36% [151 głosów]

Broadcom ARM
Broadcom ARM
52% [219 głosów]

Atheros
Atheros
5% [22 głosów]

Marvell
Marvell
1% [4 głosów]

Ralink
Ralink
1% [3 głosów]

Intel/AMD/VIA
Intel/AMD/VIA
1% [5 głosów]

Żaden z powyższych
Żaden z powyższych
4% [15 głosów]

Ogółem głosów: 419
Musisz zalogować się, aby móc zagłosować.
Rozpoczęto: 02/02/2015 09:38
Twoje IP
3.149.250.65
Zobacz wątek
OpenLinksys » :: POZOSTAŁE :: » Free zone
 Drukuj wątek
Czy to mogła być próba dostania się na router?
naiLo
Top  #1 Drukuj post
Dodano 07-07-2011 20:38
Właśnie przeglądam logi na tomato i zauważyłem mase prób połączenia się.
Czy to mogła być próba włamania? wyglada że adres ip pochodzi z turcji...

Kod Pobierz kod źródłowy  

Jul  7 05:34:46 RT-N16 authpriv.info dropbear[4354]: Child connection from ::ffff:212.156.50.14:52233

Jul  7 05:34:47 RT-N16 authpriv.warn dropbear[4354]: Bad password attempt for 'root' from ::ffff:212.156.50.14:52233

Jul  7 05:34:48 RT-N16 authpriv.info dropbear[4354]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:35:58 RT-N16 authpriv.info dropbear[4382]: Child connection from ::ffff:212.156.50.14:31401

Jul  7 05:35:59 RT-N16 authpriv.warn dropbear[4382]: Login attempt for nonexistent user from ::ffff:212.156.50.14:31401

Jul  7 05:36:00 RT-N16 authpriv.info dropbear[4382]: Exit before auth: Disconnect received

Jul  7 05:37:08 RT-N16 authpriv.info dropbear[4410]: Child connection from ::ffff:212.156.50.14:32231

Jul  7 05:37:09 RT-N16 authpriv.warn dropbear[4410]: Bad password attempt for 'root' from ::ffff:212.156.50.14:32231

Jul  7 05:37:09 RT-N16 authpriv.info dropbear[4410]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:38:18 RT-N16 authpriv.info dropbear[4437]: Child connection from ::ffff:212.156.50.14:55716

Jul  7 05:38:19 RT-N16 authpriv.warn dropbear[4437]: Bad password attempt for 'root' from ::ffff:212.156.50.14:55716

Jul  7 05:38:19 RT-N16 authpriv.info dropbear[4437]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:39:28 RT-N16 authpriv.info dropbear[4465]: Child connection from ::ffff:212.156.50.14:50759

Jul  7 05:39:29 RT-N16 authpriv.warn dropbear[4465]: Bad password attempt for 'root' from ::ffff:212.156.50.14:50759

Jul  7 05:39:30 RT-N16 authpriv.info dropbear[4465]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:40:38 RT-N16 authpriv.info dropbear[4493]: Child connection from ::ffff:212.156.50.14:47335

Jul  7 05:40:39 RT-N16 authpriv.warn dropbear[4493]: Bad password attempt for 'root' from ::ffff:212.156.50.14:47335

Jul  7 05:40:39 RT-N16 authpriv.info dropbear[4493]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:41:47 RT-N16 authpriv.info dropbear[4520]: Child connection from ::ffff:212.156.50.14:51233

Jul  7 05:41:49 RT-N16 authpriv.warn dropbear[4520]: Bad password attempt for 'root' from ::ffff:212.156.50.14:51233

Jul  7 05:41:49 RT-N16 authpriv.info dropbear[4520]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:42:57 RT-N16 authpriv.info dropbear[4547]: Child connection from ::ffff:212.156.50.14:57038

Jul  7 05:42:59 RT-N16 authpriv.warn dropbear[4547]: Bad password attempt for 'root' from ::ffff:212.156.50.14:57038

Jul  7 05:42:59 RT-N16 authpriv.info dropbear[4547]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:44:07 RT-N16 authpriv.info dropbear[4575]: Child connection from ::ffff:212.156.50.14:48502

Jul  7 05:44:09 RT-N16 authpriv.warn dropbear[4575]: Bad password attempt for 'root' from ::ffff:212.156.50.14:48502

Jul  7 05:44:09 RT-N16 authpriv.info dropbear[4575]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:45:17 RT-N16 authpriv.info dropbear[4602]: Child connection from ::ffff:212.156.50.14:55092

Jul  7 05:45:19 RT-N16 authpriv.warn dropbear[4602]: Bad password attempt for 'root' from ::ffff:212.156.50.14:55092

Jul  7 05:45:19 RT-N16 authpriv.info dropbear[4602]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:46:27 RT-N16 authpriv.info dropbear[4630]: Child connection from ::ffff:212.156.50.14:60636

Jul  7 05:46:29 RT-N16 authpriv.warn dropbear[4630]: Bad password attempt for 'root' from ::ffff:212.156.50.14:60636

Jul  7 05:46:29 RT-N16 authpriv.info dropbear[4630]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:47:38 RT-N16 authpriv.info dropbear[4657]: Child connection from ::ffff:212.156.50.14:28823

Jul  7 05:47:39 RT-N16 authpriv.warn dropbear[4657]: Bad password attempt for 'root' from ::ffff:212.156.50.14:28823

Jul  7 05:47:39 RT-N16 authpriv.info dropbear[4657]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:48:47 RT-N16 authpriv.info dropbear[4684]: Child connection from ::ffff:212.156.50.14:37681

Jul  7 05:48:49 RT-N16 authpriv.warn dropbear[4684]: Bad password attempt for 'root' from ::ffff:212.156.50.14:37681

Jul  7 05:48:49 RT-N16 authpriv.info dropbear[4684]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:49:57 RT-N16 authpriv.info dropbear[4712]: Child connection from ::ffff:212.156.50.14:47059

Jul  7 05:49:59 RT-N16 authpriv.warn dropbear[4712]: Bad password attempt for 'root' from ::ffff:212.156.50.14:47059

Jul  7 05:49:59 RT-N16 authpriv.info dropbear[4712]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:51:07 RT-N16 authpriv.info dropbear[4739]: Child connection from ::ffff:212.156.50.14:41084

Jul  7 05:51:09 RT-N16 authpriv.warn dropbear[4739]: Bad password attempt for 'root' from ::ffff:212.156.50.14:41084

Jul  7 05:51:09 RT-N16 authpriv.info dropbear[4739]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:52:17 RT-N16 authpriv.info dropbear[4766]: Child connection from ::ffff:212.156.50.14:33363

Jul  7 05:52:18 RT-N16 authpriv.warn dropbear[4766]: Bad password attempt for 'root' from ::ffff:212.156.50.14:33363

Jul  7 05:52:18 RT-N16 authpriv.info dropbear[4766]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:53:26 RT-N16 authpriv.info dropbear[4793]: Child connection from ::ffff:212.156.50.14:58896

Jul  7 05:53:27 RT-N16 authpriv.warn dropbear[4793]: Bad password attempt for 'root' from ::ffff:212.156.50.14:58896

Jul  7 05:53:28 RT-N16 authpriv.info dropbear[4793]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 05:54:36 RT-N16 authpriv.info dropbear[4821]: Child connection from ::ffff:212.156.50.14:38588

Jul  7 05:54:37 RT-N16 authpriv.warn dropbear[4821]: Login attempt for nonexistent user from ::ffff:212.156.50.14:38588

Jul  7 05:54:38 RT-N16 authpriv.info dropbear[4821]: Exit before auth: Disconnect received

Jul  7 05:55:46 RT-N16 authpriv.info dropbear[4848]: Child connection from ::ffff:212.156.50.14:56676

Jul  7 05:55:47 RT-N16 authpriv.warn dropbear[4848]: Login attempt for nonexistent user from ::ffff:212.156.50.14:56676

Jul  7 05:55:47 RT-N16 authpriv.info dropbear[4848]: Exit before auth: Disconnect received

Jul  7 05:56:55 RT-N16 authpriv.info dropbear[4876]: Child connection from ::ffff:212.156.50.14:34573

Jul  7 05:56:56 RT-N16 authpriv.warn dropbear[4876]: Login attempt for nonexistent user from ::ffff:212.156.50.14:34573

Jul  7 05:56:57 RT-N16 authpriv.info dropbear[4876]: Exit before auth: Disconnect received

Jul  7 05:58:05 RT-N16 authpriv.info dropbear[4904]: Child connection from ::ffff:212.156.50.14:55233

Jul  7 05:58:06 RT-N16 authpriv.warn dropbear[4904]: Login attempt for nonexistent user from ::ffff:212.156.50.14:55233

Jul  7 05:58:07 RT-N16 authpriv.info dropbear[4904]: Exit before auth: Disconnect received

Jul  7 05:59:06 RT-N16 authpriv.info dropbear[4927]: Child connection from ::ffff:212.156.50.14:48511

Jul  7 05:59:07 RT-N16 authpriv.warn dropbear[4927]: Login attempt for nonexistent user from ::ffff:212.156.50.14:48511

Jul  7 05:59:08 RT-N16 authpriv.info dropbear[4927]: Exit before auth: Disconnect received

Jul  7 06:00:01 RT-N16 syslog.info root: -- MARK --

Jul  7 06:00:15 RT-N16 authpriv.info dropbear[4957]: Child connection from ::ffff:212.156.50.14:41754

Jul  7 06:00:17 RT-N16 authpriv.warn dropbear[4957]: Login attempt for nonexistent user from ::ffff:212.156.50.14:41754

Jul  7 06:00:17 RT-N16 authpriv.info dropbear[4957]: Exit before auth: Disconnect received

Jul  7 06:01:25 RT-N16 authpriv.info dropbear[4984]: Child connection from ::ffff:212.156.50.14:58483

Jul  7 06:01:27 RT-N16 authpriv.warn dropbear[4984]: Login attempt for nonexistent user from ::ffff:212.156.50.14:58483

Jul  7 06:01:27 RT-N16 authpriv.info dropbear[4984]: Exit before auth: Disconnect received

Jul  7 06:02:35 RT-N16 authpriv.info dropbear[5011]: Child connection from ::ffff:212.156.50.14:37924

Jul  7 06:02:36 RT-N16 authpriv.warn dropbear[5011]: Login attempt for nonexistent user from ::ffff:212.156.50.14:37924

Jul  7 06:02:37 RT-N16 authpriv.info dropbear[5011]: Exit before auth: Disconnect received

Jul  7 06:03:45 RT-N16 authpriv.info dropbear[5039]: Child connection from ::ffff:212.156.50.14:57051

Jul  7 06:03:46 RT-N16 authpriv.warn dropbear[5039]: Login attempt for nonexistent user from ::ffff:212.156.50.14:57051

Jul  7 06:03:47 RT-N16 authpriv.info dropbear[5039]: Exit before auth: Disconnect received

Jul  7 06:04:55 RT-N16 authpriv.info dropbear[5066]: Child connection from ::ffff:212.156.50.14:39557

Jul  7 06:04:56 RT-N16 authpriv.warn dropbear[5066]: Login attempt for nonexistent user from ::ffff:212.156.50.14:39557

Jul  7 06:04:57 RT-N16 authpriv.info dropbear[5066]: Exit before auth: Disconnect received

Jul  7 06:06:05 RT-N16 authpriv.info dropbear[5093]: Child connection from ::ffff:212.156.50.14:32039

Jul  7 06:06:06 RT-N16 authpriv.warn dropbear[5093]: Login attempt for nonexistent user from ::ffff:212.156.50.14:32039

Jul  7 06:06:07 RT-N16 authpriv.info dropbear[5093]: Exit before auth: Disconnect received

Jul  7 06:07:14 RT-N16 authpriv.info dropbear[5120]: Child connection from ::ffff:212.156.50.14:58121

Jul  7 06:07:15 RT-N16 authpriv.warn dropbear[5120]: Login attempt for nonexistent user from ::ffff:212.156.50.14:58121

Jul  7 06:07:16 RT-N16 authpriv.info dropbear[5120]: Exit before auth: Disconnect received

Jul  7 06:08:23 RT-N16 authpriv.info dropbear[5147]: Child connection from ::ffff:212.156.50.14:39858

Jul  7 06:08:24 RT-N16 authpriv.warn dropbear[5147]: Login attempt for nonexistent user from ::ffff:212.156.50.14:39858

Jul  7 06:08:25 RT-N16 authpriv.info dropbear[5147]: Exit before auth: Disconnect received

Jul  7 06:09:32 RT-N16 authpriv.info dropbear[5174]: Child connection from ::ffff:212.156.50.14:51802

Jul  7 06:09:33 RT-N16 authpriv.warn dropbear[5174]: Login attempt for nonexistent user from ::ffff:212.156.50.14:51802

Jul  7 06:09:34 RT-N16 authpriv.info dropbear[5174]: Exit before auth: Disconnect received

Jul  7 06:10:42 RT-N16 authpriv.info dropbear[5202]: Child connection from ::ffff:212.156.50.14:52243

Jul  7 06:10:43 RT-N16 authpriv.warn dropbear[5202]: Login attempt for nonexistent user from ::ffff:212.156.50.14:52243

Jul  7 06:10:44 RT-N16 authpriv.info dropbear[5202]: Exit before auth: Disconnect received

Jul  7 06:11:51 RT-N16 authpriv.info dropbear[5228]: Child connection from ::ffff:212.156.50.14:53134

Jul  7 06:11:52 RT-N16 authpriv.warn dropbear[5228]: Login attempt for nonexistent user from ::ffff:212.156.50.14:53134

Jul  7 06:11:53 RT-N16 authpriv.info dropbear[5228]: Exit before auth: Disconnect received

Jul  7 06:13:00 RT-N16 authpriv.info dropbear[5254]: Child connection from ::ffff:212.156.50.14:57386

Jul  7 06:13:01 RT-N16 authpriv.warn dropbear[5254]: Login attempt for nonexistent user from ::ffff:212.156.50.14:57386

Jul  7 06:13:02 RT-N16 authpriv.info dropbear[5254]: Exit before auth: Disconnect received

Jul  7 06:14:09 RT-N16 authpriv.info dropbear[5280]: Child connection from ::ffff:212.156.50.14:38107

Jul  7 06:14:10 RT-N16 authpriv.warn dropbear[5280]: Login attempt for nonexistent user from ::ffff:212.156.50.14:38107

Jul  7 06:14:11 RT-N16 authpriv.info dropbear[5280]: Exit before auth: Disconnect received

Jul  7 06:15:18 RT-N16 authpriv.info dropbear[5308]: Child connection from ::ffff:212.156.50.14:49848

Jul  7 06:15:19 RT-N16 authpriv.warn dropbear[5308]: Bad password attempt for 'root' from ::ffff:212.156.50.14:49848

Jul  7 06:15:20 RT-N16 authpriv.info dropbear[5308]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:16:27 RT-N16 authpriv.info dropbear[5335]: Child connection from ::ffff:212.156.50.14:36106

Jul  7 06:16:29 RT-N16 authpriv.warn dropbear[5335]: Login attempt for nonexistent user from ::ffff:212.156.50.14:36106

Jul  7 06:16:29 RT-N16 authpriv.info dropbear[5335]: Exit before auth: Disconnect received

Jul  7 06:17:36 RT-N16 authpriv.info dropbear[5362]: Child connection from ::ffff:212.156.50.14:38850

Jul  7 06:17:38 RT-N16 authpriv.warn dropbear[5362]: Login attempt for nonexistent user from ::ffff:212.156.50.14:38850

Jul  7 06:17:38 RT-N16 authpriv.info dropbear[5362]: Exit before auth: Disconnect received

Jul  7 06:18:44 RT-N16 authpriv.info dropbear[5389]: Child connection from ::ffff:212.156.50.14:54670

Jul  7 06:18:46 RT-N16 authpriv.warn dropbear[5389]: Login attempt for nonexistent user from ::ffff:212.156.50.14:54670

Jul  7 06:18:47 RT-N16 authpriv.info dropbear[5389]: Exit before auth: Disconnect received

Jul  7 06:19:53 RT-N16 authpriv.info dropbear[5415]: Child connection from ::ffff:212.156.50.14:60471

Jul  7 06:19:54 RT-N16 authpriv.warn dropbear[5415]: Login attempt for nonexistent user from ::ffff:212.156.50.14:60471

Jul  7 06:19:55 RT-N16 authpriv.info dropbear[5415]: Exit before auth: Disconnect received

Jul  7 06:21:02 RT-N16 authpriv.info dropbear[5442]: Child connection from ::ffff:212.156.50.14:37592

Jul  7 06:21:03 RT-N16 authpriv.warn dropbear[5442]: Bad password attempt for 'root' from ::ffff:212.156.50.14:37592

Jul  7 06:21:03 RT-N16 authpriv.info dropbear[5442]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:22:10 RT-N16 authpriv.info dropbear[5470]: Child connection from ::ffff:212.156.50.14:33340

Jul  7 06:22:12 RT-N16 authpriv.warn dropbear[5470]: Bad password attempt for 'root' from ::ffff:212.156.50.14:33340

Jul  7 06:22:12 RT-N16 authpriv.info dropbear[5470]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:23:19 RT-N16 authpriv.info dropbear[5496]: Child connection from ::ffff:212.156.50.14:52960

Jul  7 06:23:20 RT-N16 authpriv.warn dropbear[5496]: Login attempt for nonexistent user from ::ffff:212.156.50.14:52960

Jul  7 06:23:21 RT-N16 authpriv.info dropbear[5496]: Exit before auth: Disconnect received

Jul  7 06:24:27 RT-N16 authpriv.info dropbear[5524]: Child connection from ::ffff:212.156.50.14:58007

Jul  7 06:24:28 RT-N16 authpriv.warn dropbear[5524]: Login attempt for nonexistent user from ::ffff:212.156.50.14:58007

Jul  7 06:24:29 RT-N16 authpriv.info dropbear[5524]: Exit before auth: Disconnect received

Jul  7 06:25:36 RT-N16 authpriv.info dropbear[5550]: Child connection from ::ffff:212.156.50.14:60214

Jul  7 06:25:38 RT-N16 authpriv.warn dropbear[5550]: Bad password attempt for 'root' from ::ffff:212.156.50.14:60214

Jul  7 06:25:38 RT-N16 authpriv.info dropbear[5550]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:26:45 RT-N16 authpriv.info dropbear[5577]: Child connection from ::ffff:212.156.50.14:56178

Jul  7 06:26:46 RT-N16 authpriv.warn dropbear[5577]: Bad password attempt for 'root' from ::ffff:212.156.50.14:56178

Jul  7 06:26:47 RT-N16 authpriv.info dropbear[5577]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:27:54 RT-N16 authpriv.info dropbear[5604]: Child connection from ::ffff:212.156.50.14:57115

Jul  7 06:27:55 RT-N16 authpriv.warn dropbear[5604]: Bad password attempt for 'root' from ::ffff:212.156.50.14:57115

Jul  7 06:27:55 RT-N16 authpriv.info dropbear[5604]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:29:02 RT-N16 authpriv.info dropbear[5630]: Child connection from ::ffff:212.156.50.14:34765

Jul  7 06:29:04 RT-N16 authpriv.warn dropbear[5630]: Bad password attempt for 'root' from ::ffff:212.156.50.14:34765

Jul  7 06:29:04 RT-N16 authpriv.info dropbear[5630]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:30:11 RT-N16 authpriv.info dropbear[5657]: Child connection from ::ffff:212.156.50.14:60815

Jul  7 06:30:12 RT-N16 authpriv.warn dropbear[5657]: Bad password attempt for 'root' from ::ffff:212.156.50.14:60815

Jul  7 06:30:13 RT-N16 authpriv.info dropbear[5657]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:30:51 RT-N16 daemon.info dnsmasq-dhcp[2892]: DHCPINFORM(br0) 192.168.2.100 00:50:da:e0:ce:8d 

Jul  7 06:30:51 RT-N16 daemon.info dnsmasq-dhcp[2892]: DHCPACK(br0) 192.168.2.100 00:50:da:e0:ce:8d stacjonar

Jul  7 06:31:20 RT-N16 authpriv.info dropbear[5684]: Child connection from ::ffff:212.156.50.14:55703

Jul  7 06:31:21 RT-N16 authpriv.warn dropbear[5684]: Bad password attempt for 'root' from ::ffff:212.156.50.14:55703

Jul  7 06:31:21 RT-N16 authpriv.info dropbear[5684]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:32:28 RT-N16 authpriv.info dropbear[5711]: Child connection from ::ffff:212.156.50.14:59443

Jul  7 06:32:29 RT-N16 authpriv.warn dropbear[5711]: Bad password attempt for 'root' from ::ffff:212.156.50.14:59443

Jul  7 06:32:30 RT-N16 authpriv.info dropbear[5711]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:33:37 RT-N16 authpriv.info dropbear[5738]: Child connection from ::ffff:212.156.50.14:53983

Jul  7 06:33:38 RT-N16 authpriv.warn dropbear[5738]: Bad password attempt for 'root' from ::ffff:212.156.50.14:53983

Jul  7 06:33:39 RT-N16 authpriv.info dropbear[5738]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:34:45 RT-N16 authpriv.info dropbear[5765]: Child connection from ::ffff:212.156.50.14:56976

Jul  7 06:34:47 RT-N16 authpriv.warn dropbear[5765]: Bad password attempt for 'root' from ::ffff:212.156.50.14:56976

Jul  7 06:34:47 RT-N16 authpriv.info dropbear[5765]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:35:54 RT-N16 authpriv.info dropbear[5792]: Child connection from ::ffff:212.156.50.14:35141

Jul  7 06:35:55 RT-N16 authpriv.warn dropbear[5792]: Bad password attempt for 'root' from ::ffff:212.156.50.14:35141

Jul  7 06:35:56 RT-N16 authpriv.info dropbear[5792]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:37:03 RT-N16 authpriv.info dropbear[5818]: Child connection from ::ffff:212.156.50.14:52648

Jul  7 06:37:04 RT-N16 authpriv.warn dropbear[5818]: Bad password attempt for 'root' from ::ffff:212.156.50.14:52648

Jul  7 06:37:04 RT-N16 authpriv.info dropbear[5818]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:38:11 RT-N16 authpriv.info dropbear[5846]: Child connection from ::ffff:212.156.50.14:32330

Jul  7 06:38:12 RT-N16 authpriv.warn dropbear[5846]: Bad password attempt for 'root' from ::ffff:212.156.50.14:32330

Jul  7 06:38:13 RT-N16 authpriv.info dropbear[5846]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:39:20 RT-N16 authpriv.info dropbear[5872]: Child connection from ::ffff:212.156.50.14:32497

Jul  7 06:39:21 RT-N16 authpriv.warn dropbear[5872]: Bad password attempt for 'root' from ::ffff:212.156.50.14:32497

Jul  7 06:39:21 RT-N16 authpriv.info dropbear[5872]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:40:28 RT-N16 authpriv.info dropbear[5899]: Child connection from ::ffff:212.156.50.14:41641

Jul  7 06:40:29 RT-N16 authpriv.warn dropbear[5899]: Bad password attempt for 'root' from ::ffff:212.156.50.14:41641

Jul  7 06:40:30 RT-N16 authpriv.info dropbear[5899]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:41:37 RT-N16 authpriv.info dropbear[5926]: Child connection from ::ffff:212.156.50.14:44276

Jul  7 06:41:39 RT-N16 authpriv.warn dropbear[5926]: Login attempt for nonexistent user from ::ffff:212.156.50.14:44276

Jul  7 06:41:39 RT-N16 authpriv.info dropbear[5926]: Exit before auth: Disconnect received

Jul  7 06:42:46 RT-N16 authpriv.info dropbear[5953]: Child connection from ::ffff:212.156.50.14:30354

Jul  7 06:42:47 RT-N16 authpriv.warn dropbear[5953]: Login attempt for nonexistent user from ::ffff:212.156.50.14:30354

Jul  7 06:42:48 RT-N16 authpriv.info dropbear[5953]: Exit before auth: Disconnect received

Jul  7 06:43:55 RT-N16 authpriv.info dropbear[5981]: Child connection from ::ffff:212.156.50.14:41788

Jul  7 06:43:56 RT-N16 authpriv.warn dropbear[5981]: Login attempt for nonexistent user from ::ffff:212.156.50.14:41788

Jul  7 06:43:57 RT-N16 authpriv.info dropbear[5981]: Exit before auth: Disconnect received

Jul  7 06:45:03 RT-N16 authpriv.info dropbear[6007]: Child connection from ::ffff:212.156.50.14:30199

Jul  7 06:45:04 RT-N16 authpriv.warn dropbear[6007]: Login attempt for nonexistent user from ::ffff:212.156.50.14:30199

Jul  7 06:45:05 RT-N16 authpriv.info dropbear[6007]: Exit before auth: Disconnect received

Jul  7 06:46:12 RT-N16 authpriv.info dropbear[6034]: Child connection from ::ffff:212.156.50.14:33091

Jul  7 06:46:13 RT-N16 authpriv.warn dropbear[6034]: Bad password attempt for 'root' from ::ffff:212.156.50.14:33091

Jul  7 06:46:14 RT-N16 authpriv.info dropbear[6034]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:47:21 RT-N16 authpriv.info dropbear[6061]: Child connection from ::ffff:212.156.50.14:42477

Jul  7 06:47:22 RT-N16 authpriv.warn dropbear[6061]: Bad password attempt for 'root' from ::ffff:212.156.50.14:42477

Jul  7 06:47:23 RT-N16 authpriv.info dropbear[6061]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:48:28 RT-N16 authpriv.info dropbear[6087]: Child connection from ::ffff:212.156.50.14:33191

Jul  7 06:48:29 RT-N16 authpriv.warn dropbear[6087]: Login attempt for nonexistent user from ::ffff:212.156.50.14:33191

Jul  7 06:48:30 RT-N16 authpriv.info dropbear[6087]: Exit before auth: Disconnect received

Jul  7 06:49:36 RT-N16 authpriv.info dropbear[6114]: Child connection from ::ffff:212.156.50.14:35403

Jul  7 06:49:37 RT-N16 authpriv.warn dropbear[6114]: Login attempt for nonexistent user from ::ffff:212.156.50.14:35403

Jul  7 06:49:38 RT-N16 authpriv.info dropbear[6114]: Exit before auth: Disconnect received

Jul  7 06:50:43 RT-N16 authpriv.info dropbear[6141]: Child connection from ::ffff:212.156.50.14:51967

Jul  7 06:50:44 RT-N16 authpriv.warn dropbear[6141]: Login attempt for nonexistent user from ::ffff:212.156.50.14:51967

Jul  7 06:50:45 RT-N16 authpriv.info dropbear[6141]: Exit before auth: Disconnect received

Jul  7 06:51:51 RT-N16 authpriv.info dropbear[6167]: Child connection from ::ffff:212.156.50.14:45822

Jul  7 06:51:52 RT-N16 authpriv.warn dropbear[6167]: Login attempt for nonexistent user from ::ffff:212.156.50.14:45822

Jul  7 06:51:53 RT-N16 authpriv.info dropbear[6167]: Exit before auth: Disconnect received

Jul  7 06:52:58 RT-N16 authpriv.info dropbear[6192]: Child connection from ::ffff:212.156.50.14:45722

Jul  7 06:52:59 RT-N16 authpriv.warn dropbear[6192]: Login attempt for nonexistent user from ::ffff:212.156.50.14:45722

Jul  7 06:53:00 RT-N16 authpriv.info dropbear[6192]: Exit before auth: Disconnect received

Jul  7 06:54:05 RT-N16 authpriv.info dropbear[6219]: Child connection from ::ffff:212.156.50.14:48468

Jul  7 06:54:07 RT-N16 authpriv.warn dropbear[6219]: Login attempt for nonexistent user from ::ffff:212.156.50.14:48468

Jul  7 06:54:08 RT-N16 authpriv.info dropbear[6219]: Exit before auth: Disconnect received

Jul  7 06:55:13 RT-N16 authpriv.info dropbear[6245]: Child connection from ::ffff:212.156.50.14:56584

Jul  7 06:55:14 RT-N16 authpriv.warn dropbear[6245]: Login attempt for nonexistent user from ::ffff:212.156.50.14:56584

Jul  7 06:55:15 RT-N16 authpriv.info dropbear[6245]: Exit before auth: Disconnect received

Jul  7 06:56:20 RT-N16 authpriv.info dropbear[6271]: Child connection from ::ffff:212.156.50.14:59611

Jul  7 06:56:22 RT-N16 authpriv.warn dropbear[6271]: Bad password attempt for 'root' from ::ffff:212.156.50.14:59611

Jul  7 06:56:22 RT-N16 authpriv.info dropbear[6271]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 06:57:28 RT-N16 authpriv.info dropbear[6298]: Child connection from ::ffff:212.156.50.14:37508

Jul  7 06:57:29 RT-N16 authpriv.warn dropbear[6298]: Login attempt for nonexistent user from ::ffff:212.156.50.14:37508

Jul  7 06:57:30 RT-N16 authpriv.info dropbear[6298]: Exit before auth: Disconnect received

Jul  7 06:58:35 RT-N16 authpriv.info dropbear[6325]: Child connection from ::ffff:212.156.50.14:31034

Jul  7 06:58:36 RT-N16 authpriv.warn dropbear[6325]: Login attempt for nonexistent user from ::ffff:212.156.50.14:31034

Jul  7 06:58:37 RT-N16 authpriv.info dropbear[6325]: Exit before auth: Disconnect received

Jul  7 06:59:42 RT-N16 authpriv.info dropbear[6352]: Child connection from ::ffff:212.156.50.14:57829

Jul  7 06:59:44 RT-N16 authpriv.warn dropbear[6352]: Bad password attempt for 'root' from ::ffff:212.156.50.14:57829

Jul  7 06:59:44 RT-N16 authpriv.info dropbear[6352]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 07:00:01 RT-N16 syslog.info root: -- MARK --

Jul  7 07:00:50 RT-N16 authpriv.info dropbear[6380]: Child connection from ::ffff:212.156.50.14:43394

Jul  7 07:00:51 RT-N16 authpriv.warn dropbear[6380]: Bad password attempt for 'root' from ::ffff:212.156.50.14:43394

Jul  7 07:00:52 RT-N16 authpriv.info dropbear[6380]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 07:01:57 RT-N16 authpriv.info dropbear[6406]: Child connection from ::ffff:212.156.50.14:41207

Jul  7 07:01:58 RT-N16 authpriv.warn dropbear[6406]: Bad password attempt for 'root' from ::ffff:212.156.50.14:41207

Jul  7 07:01:59 RT-N16 authpriv.info dropbear[6406]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 07:03:04 RT-N16 authpriv.info dropbear[6432]: Child connection from ::ffff:212.156.50.14:50366

Jul  7 07:03:06 RT-N16 authpriv.warn dropbear[6432]: Bad password attempt for 'root' from ::ffff:212.156.50.14:50366

Jul  7 07:03:06 RT-N16 authpriv.info dropbear[6432]: Exit before auth (user 'root', 1 fails): Disconnect received

Jul  7 07:04:12 RT-N16 authpriv.info dropbear[6459]: Child connection from ::ffff:212.156.50.14:42851

Jul  7 07:04:13 RT-N16 authpriv.warn dropbear[6459]: Login attempt for nonexistent user from ::ffff:212.156.50.14:42851

Jul  7 07:04:14 RT-N16 authpriv.info dropbear[6459]: Exit before auth: Disconnect received

Jul  7 07:05:19 RT-N16 authpriv.info dropbear[6485]: Child connection from ::ffff:212.156.50.14:30485

Jul  7 07:05:20 RT-N16 authpriv.warn dropbear[6485]: Login attempt for nonexistent user from ::ffff:212.156.50.14:30485

Jul  7 07:05:21 RT-N16 authpriv.info dropbear[6485]: Exit before auth: Disconnect received

Jul  7 07:06:25 RT-N16 authpriv.info dropbear[6511]: Child connection from ::ffff:212.156.50.14:43444

Jul  7 07:06:27 RT-N16 authpriv.warn dropbear[6511]: Login attempt for nonexistent user from ::ffff:212.156.50.14:43444

Jul  7 07:06:27 RT-N16 authpriv.info dropbear[6511]: Exit before auth: Disconnect received

Jul  7 07:07:32 RT-N16 authpriv.info dropbear[6538]: Child connection from ::ffff:212.156.50.14:55380

Jul  7 07:07:33 RT-N16 authpriv.warn dropbear[6538]: Login attempt for nonexistent user from ::ffff:212.156.50.14:55380

Jul  7 07:07:34 RT-N16 authpriv.info dropbear[6538]: Exit before auth: Disconnect received

Jul  7 07:08:39 RT-N16 authpriv.info dropbear[6564]: Child connection from ::ffff:212.156.50.14:28685

Jul  7 07:08:40 RT-N16 authpriv.warn dropbear[6564]: Login attempt for nonexistent user from ::ffff:212.156.50.14:28685

Jul  7 07:08:41 RT-N16 authpriv.info dropbear[6564]: Exit before auth: Disconnect received

Jul  7 07:09:46 RT-N16 authpriv.info dropbear[6590]: Child connection from ::ffff:212.156.50.14:48822

Jul  7 07:09:47 RT-N16 authpriv.warn dropbear[6590]: Login attempt for nonexistent user from ::ffff:212.156.50.14:48822

Jul  7 07:09:48 RT-N16 authpriv.info dropbear[6590]: Exit before auth: Disconnect received

Jul  7 07:10:53 RT-N16 authpriv.info dropbear[6616]: Child connection from ::ffff:212.156.50.14:57689

Jul  7 07:10:54 RT-N16 authpriv.warn dropbear[6616]: Login attempt for nonexistent user from ::ffff:212.156.50.14:57689

Jul  7 07:10:55 RT-N16 authpriv.info dropbear[6616]: Exit before auth: Disconnect received

Jul  7 07:12:00 RT-N16 authpriv.info dropbear[6643]: Child connection from ::ffff:212.156.50.14:42180

Jul  7 07:12:01 RT-N16 authpriv.warn dropbear[6643]: Login attempt for nonexistent user from ::ffff:212.156.50.14:42180

Jul  7 07:12:02 RT-N16 authpriv.info dropbear[6643]: Exit before auth: Disconnect received

Jul  7 07:13:07 RT-N16 authpriv.info dropbear[6669]: Child connection from ::ffff:212.156.50.14:51064

Jul  7 07:13:08 RT-N16 authpriv.warn dropbear[6669]: Login attempt for nonexistent user from ::ffff:212.156.50.14:51064

Jul  7 07:13:09 RT-N16 authpriv.info dropbear[6669]: Exit before auth: Disconnect received

Jul  7 07:14:13 RT-N16 authpriv.info dropbear[6695]: Child connection from ::ffff:212.156.50.14:38169

Jul  7 07:14:15 RT-N16 authpriv.warn dropbear[6695]: Login attempt for nonexistent user from ::ffff:212.156.50.14:38169

Jul  7 07:14:15 RT-N16 authpriv.info dropbear[6695]: Exit before auth: Disconnect received

Jul  7 07:15:21 RT-N16 authpriv.info dropbear[6722]: Child connection from ::ffff:212.156.50.14:54213

Jul  7 07:15:22 RT-N16 authpriv.warn dropbear[6722]: Login attempt for nonexistent user from ::ffff:212.156.50.14:54213

Jul  7 07:15:23 RT-N16 authpriv.info dropbear[6722]: Exit before auth: Disconnect received

Jul  7 07:16:27 RT-N16 authpriv.info dropbear[6748]: Child connection from ::ffff:212.156.50.14:29912

Jul  7 07:16:29 RT-N16 authpriv.warn dropbear[6748]: Bad password attempt for 'nobody' from ::ffff:212.156.50.14:29912

Jul  7 07:16:29 RT-N16 authpriv.info dropbear[6748]: Exit before auth (user 'nobody', 1 fails): Disconnect received

Jul  7 07:18:46 RT-N16 authpriv.info dropbear[6801]: Child connection from ::ffff:212.156.50.14:31033

Jul  7 07:18:47 RT-N16 authpriv.warn dropbear[6801]: Login attempt for nonexistent user from ::ffff:212.156.50.14:31033

Jul  7 07:18:48 RT-N16 authpriv.info dropbear[6801]: Exit before auth: Disconnect received

Jul  7 07:19:53 RT-N16 authpriv.info dropbear[6828]: Child connection from ::ffff:212.156.50.14:40932

Jul  7 07:19:54 RT-N16 authpriv.warn dropbear[6828]: Login attempt for nonexistent user from ::ffff:212.156.50.14:40932

Jul  7 07:19:55 RT-N16 authpriv.info dropbear[6828]: Exit before auth: Disconnect received

Jul  7 07:21:00 RT-N16 authpriv.info dropbear[6853]: Child connection from ::ffff:212.156.50.14:43918

Jul  7 07:21:01 RT-N16 authpriv.warn dropbear[6853]: Login attempt for nonexistent user from ::ffff:212.156.50.14:43918

Jul  7 07:21:02 RT-N16 authpriv.info dropbear[6853]: Exit before auth: Disconnect received

Jul  7 07:22:07 RT-N16 authpriv.info dropbear[6880]: Child connection from ::ffff:212.156.50.14:47305

Jul  7 07:22:08 RT-N16 authpriv.warn dropbear[6880]: Login attempt for nonexistent user from ::ffff:212.156.50.14:47305

Jul  7 07:22:09 RT-N16 authpriv.info dropbear[6880]: Exit before auth: Disconnect received

Jul  7 07:24:29 RT-N16 authpriv.info dropbear[6934]: Child connection from ::ffff:212.156.50.14:59190

Jul  7 07:24:30 RT-N16 authpriv.warn dropbear[6934]: Login attempt for nonexistent user from ::ffff:212.156.50.14:59190

Jul  7 07:24:31 RT-N16 authpriv.info dropbear[6934]: Exit before auth: Disconnect received

Jul  7 07:25:36 RT-N16 authpriv.info dropbear[6961]: Child connection from ::ffff:212.156.50.14:52689

Jul  7 07:25:37 RT-N16 authpriv.warn dropbear[6961]: Login attempt for nonexistent user from ::ffff:212.156.50.14:52689

Jul  7 07:25:38 RT-N16 authpriv.info dropbear[6961]: Exit before auth: Disconnect received

Jul  7 07:26:43 RT-N16 authpriv.info dropbear[6987]: Child connection from ::ffff:212.156.50.14:52372

Jul  7 07:26:44 RT-N16 authpriv.warn dropbear[6987]: Login attempt for nonexistent user from ::ffff:212.156.50.14:52372

Jul  7 07:26:45 RT-N16 authpriv.info dropbear[6987]: Exit before auth: Disconnect received

Jul  7 07:27:49 RT-N16 authpriv.info dropbear[7013]: Child connection from ::ffff:212.156.50.14:39732

Jul  7 07:27:51 RT-N16 authpriv.warn dropbear[7013]: Login attempt for nonexistent user from ::ffff:212.156.50.14:39732

Jul  7 07:27:52 RT-N16 authpriv.info dropbear[7013]: Exit before auth: Disconnect received

Jul  7 07:29:01 RT-N16 authpriv.info dropbear[7042]: Child connection from ::ffff:212.156.50.14:29160

Jul  7 07:29:02 RT-N16 authpriv.info dropbear[7042]: Exit before auth: Exited normally

Jul  7 07:30:03 RT-N16 authpriv.info dropbear[7066]: Child connection from ::ffff:212.156.50.14:36747

Jul  7 07:30:04 RT-N16 authpriv.warn dropbear[7066]: Login attempt for nonexistent user from ::ffff:212.156.50.14:36747

Jul  7 07:30:05 RT-N16 authpriv.info dropbear[7066]: Exit before auth: Disconnect received

Jul  7 07:31:10 RT-N16 authpriv.info dropbear[7092]: Child connection from ::ffff:212.156.50.14:40945

Jul  7 07:31:11 RT-N16 authpriv.warn dropbear[7092]: Login attempt for nonexistent user from ::ffff:212.156.50.14:40945

Jul  7 07:31:12 RT-N16 authpriv.info dropbear[7092]: Exit before auth: Disconnect received

Jul  7 07:32:17 RT-N16 authpriv.info dropbear[7118]: Child connection from ::ffff:212.156.50.14:33202

Jul  7 07:32:18 RT-N16 authpriv.warn dropbear[7118]: Login attempt for nonexistent user from ::ffff:212.156.50.14:33202

Jul  7 07:32:19 RT-N16 authpriv.info dropbear[7118]: Exit before auth: Disconnect received

Jul  7 07:33:24 RT-N16 authpriv.info dropbear[7144]: Child connection from ::ffff:212.156.50.14:45159

Jul  7 07:33:25 RT-N16 authpriv.warn dropbear[7144]: Login attempt for nonexistent user from ::ffff:212.156.50.14:45159

Jul  7 07:33:26 RT-N16 authpriv.info dropbear[7144]: Exit before auth: Disconnect received

Jul  7 07:34:31 RT-N16 authpriv.info dropbear[7171]: Child connection from ::ffff:212.156.50.14:52239

Jul  7 07:34:32 RT-N16 authpriv.warn dropbear[7171]: Login attempt for nonexistent user from ::ffff:212.156.50.14:52239

Jul  7 07:34:33 RT-N16 authpriv.info dropbear[7171]: Exit before auth: Disconnect received

Jul  7 07:35:37 RT-N16 authpriv.info dropbear[7198]: Child connection from ::ffff:212.156.50.14:43197

Jul  7 07:35:38 RT-N16 authpriv.warn dropbear[7198]: Login attempt for nonexistent user from ::ffff:212.156.50.14:43197

Jul  7 07:35:39 RT-N16 authpriv.info dropbear[7198]: Exit before auth: Disconnect received

Jul  7 07:36:44 RT-N16 authpriv.info dropbear[7224]: Child connection from ::ffff:212.156.50.14:33266

Jul  7 07:36:45 RT-N16 authpriv.warn dropbear[7224]: Login attempt for nonexistent user from ::ffff:212.156.50.14:33266

Jul  7 07:36:46 RT-N16 authpriv.info dropbear[7224]: Exit before auth: Disconnect received

Jul  7 07:37:51 RT-N16 authpriv.info dropbear[7251]: Child connection from ::ffff:212.156.50.14:50106

Jul  7 07:37:52 RT-N16 authpriv.warn dropbear[7251]: Login attempt for nonexistent user from ::ffff:212.156.50.14:50106

Jul  7 07:37:53 RT-N16 authpriv.info dropbear[7251]: Exit before auth: Disconnect received

Jul  7 07:38:58 RT-N16 authpriv.info dropbear[7277]: Child connection from ::ffff:212.156.50.14:33891

Jul  7 07:38:59 RT-N16 authpriv.warn dropbear[7277]: Login attempt for nonexistent user from ::ffff:212.156.50.14:33891

Jul  7 07:39:00 RT-N16 authpriv.info dropbear[7277]: Exit before auth: Disconnect received

Jul  7 07:40:05 RT-N16 authpriv.info dropbear[7303]: Child connection from ::ffff:212.156.50.14:59907

Jul  7 07:40:06 RT-N16 authpriv.warn dropbear[7303]: Login attempt for nonexistent user from ::ffff:212.156.50.14:59907

Jul  7 07:40:07 RT-N16 authpriv.info dropbear[7303]: Exit before auth: Disconnect received
Edytowany przez naiLo dnia 07-07-2011 21:04
Powered by ASUS RT-N16 + Tomato Firmware 1.28.0000 MIPSR2-084V K26 USB AIO + SAMSUNG S2 PORTABLE 1TB
 
iroc
Top  #2 Drukuj post
Dodano 07-07-2011 21:00
"Pruba" nie, ale próba tak. Widać jakby ktoś lub "coś" dobijało się na różnych portach.
-asus rt-n18u-
tomato,ddwrt,gargoyle
 
shibby
Top  #3 Drukuj post
Dodano 08-07-2011 09:33
nie skanuje, tylko probuje zalogowac sie na ssh. Porty przy ipku to port zródłowy a nie docelowy.

naiLo włącz sobie w administration -> admin access -> Limit Connection Attempts dla SSH na 3,60 i bedziesz mial po kłopocie.
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 3x 2TB SSD, Intel X710-DA2 SFP+
VM Router: OpenWRT 22.03.4
VM NAS: Synology SA6400
VM VPS: Debian, WWW, Home Assistant
Switch: Netgear MS510TXPP
Switch: Ubiquiti USW-Flex-mini - szt. 2
Wi-Fi: Ubiquiti U6-Lite - szt. 2
 
naiLo
Top  #4 Drukuj post
Dodano 08-07-2011 10:24
tak mam ustawione, chyba domyślnie od ciebie
dzięki za info
Powered by ASUS RT-N16 + Tomato Firmware 1.28.0000 MIPSR2-084V K26 USB AIO + SAMSUNG S2 PORTABLE 1TB
 
shibby
Top  #5 Drukuj post
Dodano 08-07-2011 12:03
no to dziwne ze go nie zablokowalo po 3 nieudanych probach. Po 3 próbach powinein dostac bana na 60sek. Powinno to wystarczyc na odstraszenie bota. Chyba ze był taki uparty i po 60sek probował znow Wink
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 3x 2TB SSD, Intel X710-DA2 SFP+
VM Router: OpenWRT 22.03.4
VM NAS: Synology SA6400
VM VPS: Debian, WWW, Home Assistant
Switch: Netgear MS510TXPP
Switch: Ubiquiti USW-Flex-mini - szt. 2
Wi-Fi: Ubiquiti U6-Lite - szt. 2
 
iroc
Top  #6 Drukuj post
Dodano 08-07-2011 12:50
Chyba że naiLo nie ustawił tego poprawnie, albo ta opcja nie działa prawidłowo u niego.
Bo u mnie jak ptaszek jest na ssh oraz telnet nie działa dostęp zdalny, ale jak ptaszek jest na samym ssh jest okej czyli ssh działa.

edit: ponownie odznaczone i ponowne zaznaczone ssh i telnet -->save, działa OK dostęp jest. Ale po 3 próbach źle wpisanego hasła nadal działa połączenie, jak jest u Was ?
Edytowany przez iroc dnia 08-07-2011 12:58
-asus rt-n18u-
tomato,ddwrt,gargoyle
 
shibby
Top  #7 Drukuj post
Dodano 08-07-2011 13:56
wylacz Remote Forwarding dla ssh

polacz sie przez putty i wpisuj rozne hasla po 3-4 próbach sie rozlaczy (rozlaczenie jest liczone jako 1)
polacz sie ponownie i znow wpisuj bledne hasla, znow cie kompie (rozlaczenie nr 2)
polacz sie ponownie i znow wpisuj bledne hasla, znow cie kompie ( rozlaczenie nr 3)

sprobuj znow sie polaczyc i juz ci sie nie uda. Masz bana na 60sek.

tak wiec mozna ustawic nawet na 1 / 60 tak by po jednym kopnieciu (czyli ok 3-4 probach) juz dawal bana.
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 3x 2TB SSD, Intel X710-DA2 SFP+
VM Router: OpenWRT 22.03.4
VM NAS: Synology SA6400
VM VPS: Debian, WWW, Home Assistant
Switch: Netgear MS510TXPP
Switch: Ubiquiti USW-Flex-mini - szt. 2
Wi-Fi: Ubiquiti U6-Lite - szt. 2
 
naiLo
Top  #8 Drukuj post
Dodano 08-07-2011 14:07
no to dziwne bo mnie dopiero po 10 blednych haslach rozłączył
a mam ustawione jak mowisz 3every 6sec

Kod Pobierz kod źródłowy  

Jul  8 14:03:26 RT-N16 authpriv.info dropbear[13439]: Child connection from ::ffff:

Jul  8 14:03:34 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021

Jul  8 14:03:37 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021

Jul  8 14:03:39 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021

Jul  8 14:03:41 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021

Jul  8 14:03:43 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021

Jul  8 14:03:45 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021

Jul  8 14:03:47 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021

Jul  8 14:03:49 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021

Jul  8 14:03:51 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021

Jul  8 14:03:53 RT-N16 authpriv.warn dropbear[13439]: Bad password attempt for 'root' from ::ffff:195.242.108.142:50021

Jul  8 14:03:54 RT-N16 authpriv.info dropbear[13439]: Exit before auth (user 'root', 10 fails): Max au
Powered by ASUS RT-N16 + Tomato Firmware 1.28.0000 MIPSR2-084V K26 USB AIO + SAMSUNG S2 PORTABLE 1TB
 
shibby
Top  #9 Drukuj post
Dodano 08-07-2011 14:20
1 every 60 sec i zobacz wtedy. wpisuj rozne hasla Smile
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 3x 2TB SSD, Intel X710-DA2 SFP+
VM Router: OpenWRT 22.03.4
VM NAS: Synology SA6400
VM VPS: Debian, WWW, Home Assistant
Switch: Netgear MS510TXPP
Switch: Ubiquiti USW-Flex-mini - szt. 2
Wi-Fi: Ubiquiti U6-Lite - szt. 2
 
naiLo
Top  #10 Drukuj post
Dodano 08-07-2011 14:36
to samo chyba ze ustawienia działają po restarcie
Powered by ASUS RT-N16 + Tomato Firmware 1.28.0000 MIPSR2-084V K26 USB AIO + SAMSUNG S2 PORTABLE 1TB
 
buniaczek
Top  #11 Drukuj post
Dodano 08-07-2011 14:44
Podpinając się pod temat:
Czy jest możliwość zobaczenie w logach prób nieudanych logowań z www/ssh?
-------------------------
Netgear WNR3500L || Tomato-K26USB-1.28 RT5x MIPSR2 101V Big-VPN ||
Asus RT-N56U || Asus firmware 3.0.0.3.135 - wygrania w konkursie na openlinksys.info||
[b]Asus RT-N10U v.B1 [small]
 
shibby
Top  #12 Drukuj post
Dodano 08-07-2011 15:53
dla ssh bedzie
cat /var/log/messages | grep authpriv | grep 'Bad password'

dla http nie ma logów.
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 3x 2TB SSD, Intel X710-DA2 SFP+
VM Router: OpenWRT 22.03.4
VM NAS: Synology SA6400
VM VPS: Debian, WWW, Home Assistant
Switch: Netgear MS510TXPP
Switch: Ubiquiti USW-Flex-mini - szt. 2
Wi-Fi: Ubiquiti U6-Lite - szt. 2
 
iroc
Top  #13 Drukuj post
Dodano 08-07-2011 16:32
Dodam tylko, że osobiście tego nie używałem i tylko testnąłem. Ale skoro sprawdzone przez shibbiego to już sprawdzać nie będę Smile
-asus rt-n18u-
tomato,ddwrt,gargoyle
 
Eleonor
Top  #14 Drukuj post
Dodano 13-02-2017 14:07
Witam - od jakiegoś czasu mam prawie co dziennie ,, atak ,, z takiego IP

Feb 12 20:09:13 Router authpriv.info dropbear[13575]: Child connection from 176.123.27.28:11400
Feb 12 20:09:14 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:14 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:15 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:15 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:15 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:15 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:15 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:15 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:16 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:16 Router authpriv.warn dropbear[13575]: Bad password attempt for 'root' from 176.123.27.28:11400
Feb 12 20:09:16 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:16 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:16 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:16 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:17 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:17 Router authpriv.warn dropbear[13575]: Bad password attempt for 'root' from 176.123.27.28:11400
Feb 12 20:09:17 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:17 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:17 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:17 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:18 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:18 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:18 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:18 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:18 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:18 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:19 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:19 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:19 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:19 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:19 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:20 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:20 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:20 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:20 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:20 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:20 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:21 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:21 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:21 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:21 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:21 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:21 Router authpriv.warn dropbear[13575]: Bad password attempt for 'root' from 176.123.27.28:11400
Feb 12 20:09:22 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:22 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:22 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:22 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:22 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:22 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:23 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:23 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:23 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:23 Router authpriv.warn dropbear[13575]: Bad password attempt for 'root' from 176.123.27.28:11400
Feb 12 20:09:24 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:24 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:24 Router authpriv.warn dropbear[13575]: Client trying multiple usernames from 176.123.27.28:11400
Feb 12 20:09:24 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:24 Router authpriv.warn dropbear[13575]: Login attempt for nonexistent user from 176.123.27.28:11400
Feb 12 20:09:25 Router authpriv.info dropbear[13575]: Exit before auth: Exited normally

W Admin Restrictions w Limit Connection Attempts mam zaznaczone tylko SSH oraz 1 na 3600

coś można z tym zrobić czy tak zostawić i się nie przejmować ?
Synology RT6600ax - obecnie
Netgear R7000 Tomato 2017.3-kille72 AIO - kiedyś Smile
 
kille72
Top  #15 Drukuj post
Dodano 13-02-2017 14:37
1. Port 22? Zmien na inny, np 2222.
2. Tylko z jednego IP? Zablokuj ten IP.
 
Eleonor
Top  #16 Drukuj post
Dodano 13-02-2017 16:42
A jak ten jeden IP zablokować ?
Synology RT6600ax - obecnie
Netgear R7000 Tomato 2017.3-kille72 AIO - kiedyś Smile
 
kille72
Top  #17 Drukuj post
Dodano 13-02-2017 17:35
W Administration-Scripts-Firewall wklejasz:

Kod Pobierz kod źródłowy  

iptables -I INPUT -s 176.123.27.28 -j DROP


Później przeładowujesz usługę firewall:

Kod Pobierz kod źródłowy  

service firewall restart
 
Eleonor
Top  #18 Drukuj post
Dodano 16-02-2017 13:23
Po zmianie portu na inny nastąpiła cisza w atakach Smile
Synology RT6600ax - obecnie
Netgear R7000 Tomato 2017.3-kille72 AIO - kiedyś Smile
 
Przejdź do forum
Zaloguj
Wprowadź adres e-mail lub nazwę użytkownika

Hasło



Nie masz jeszcze konta? Zarejestruj się.

Zapomniałeś/aś hasła?
Aktualnie online
· Gości online: 115

· Użytkowników online: 0

· Łącznie użytkowników: 24,115
· Najnowszy użytkownik: Ja
Czat
Musisz się zalogować, aby opublikować wiadomość.

Maniek91PL
06-11-2024 22:37
dzięki !Grin

maxikaaz
29-10-2024 14:27
@Maniek91PL - Administration=> Admin Access, i tam masz "Allow Wireless Access" do zaznaczenia

Maniek91PL
26-10-2024 22:07
siemka! ktoś przypomni co się ustawiało jeśli nie mogę wejść od strony wifi do tomato? od lan działa

overflow2
04-10-2024 17:34
Kupowałem Asusy n10u albo n12d1 ale nie widzę ich, chyba już nie produkują, Chodzi o coś nowego i taniego. Transfery niewielkie.

maxikaaz
04-10-2024 09:38
@overflow2 patrząc po dostępności funkcji w nowych kompilacjach, to chyba nawet WRT54G/GL jeszcze ma OpenVPN, albo jakiś odpowiednik... zależy, na jakie transfery liczysz.

overflow2
30-09-2024 20:53
Jaki aktualnie najtańszy router do tomato do openvpn?

maxikaaz
27-07-2024 15:07
@servee - na początek router do rozebrania i obejrzenia, ciężko wróżyć tak tylko po objawach

maxikaaz
27-07-2024 14:55
@servee - cały kontroler nie pada tak sobie z powodu "zbiegu okoliczności",
więc prawdopodobnie gdzieś przepięcie.

servee
25-07-2024 13:33
@maxikaaz: działało, aż pewnego pięknego dnia przestało działać. W tym dniu była też burza, ale to raczej zbieg okoliczności.

maxikaaz
25-07-2024 11:38
@servee - o ile problem jest w obrębie samych wyjść (dławiki, warystory), to naprawialne, ale jeśli w samym SoC - to nienaprawialne ze względu na koszta. A co było przyczyną?
95,418,952 unikalnych wizyt
Copyright © OpenLinksys 2006-2021


Powered by PHPFusion Copyright © 2024 PHP Fusion Inc
Released as free software without warranties under GNU Affero GPL v3.