Toto je původní verze internetového fóra ISPforum.cz do února 2020 bez možnosti registrace nových uživatelů. Aktivní verzi fóra naleznete na adrese https://telekomunikace.cz

Ubnt log dropbear

Návody a problémy s konfigurací.
lacman
Příspěvky: 142
Registrován: 15 years ago

Ubnt log dropbear

Příspěvekod lacman » 5 years ago

Poradíte někdo co to je? útok? jak tomu zabránit?

Ta ip 192.168.1.20 je brána pro zařízení, toto se objevuje téměř na všech ubnt v síti.

Jan 8 17:52:44 mca-ctrl[1051]: Heartbeat reporter created successfully
Jan 8 17:52:44 dropbear[1034]: Exit (ubnt): Exited normally
Jan 8 17:52:57 dropbear[1053]: Child connection from 192.168.20.1:45391
Jan 8 17:52:57 dropbear[1053]: Exit before auth: Exited normally
Jan 8 17:53:27 dropbear[1055]: Child connection from 192.168.20.1:47611
Jan 8 17:53:27 dropbear[1055]: Exit before auth: Exited normally
Jan 8 17:53:57 dropbear[1057]: Child connection from 192.168.20.1:50026
Jan 8 17:53:57 dropbear[1057]: Exit before auth: Exited normally
Jan 8 17:54:27 dropbear[1059]: Child connection from 192.168.20.1:52380
Jan 8 17:54:27 dropbear[1059]: Exit before auth: Exited normally
Jan 8 17:54:57 dropbear[1061]: Child connection from 192.168.20.1:54622
Jan 8 17:54:57 dropbear[1061]: Exit before auth: Exited normally
Jan 8 17:55:01 dropbear[1062]: Child connection from 192.168.20.1:54683
Jan 8 17:55:01 dropbear[1062]: Exit before auth: Exited normally
Jan 8 17:55:27 dropbear[1064]: Child connection from 192.168.20.1:56938
Jan 8 17:55:27 dropbear[1064]: Exit before auth: Exited normally
Jan 8 17:55:57 dropbear[1066]: Child connection from 192.168.20.1:59081
Jan 8 17:55:57 dropbear[1066]: Exit before auth: Exited normally
Jan 8 17:56:27 dropbear[1068]: Child connection from 192.168.20.1:32810
Jan 8 17:56:27 dropbear[1068]: Exit before auth: Exited normally
Jan 8 17:56:57 dropbear[1070]: Child connection from 192.168.20.1:34545
Jan 8 17:56:57 dropbear[1070]: Exit before auth: Exited normally
Jan 8 17:57:27 dropbear[1072]: Child connection from 192.168.20.1:36279
Jan 8 17:57:27 dropbear[1072]: Exit before auth: Exited normally
Jan 8 17:57:57 dropbear[1074]: Child connection from 192.168.20.1:38021
Jan 8 17:57:57 dropbear[1074]: Exit before auth: Exited normally
Jan 8 17:58:27 dropbear[1076]: Child connection from 192.168.20.1:39756
Jan 8 17:58:27 dropbear[1076]: Exit before auth: Exited normally
Jan 8 17:58:57 dropbear[1078]: Child connection from 192.168.20.1:41499
Jan 8 17:58:57 dropbear[1078]: Exit before auth: Exited normally
Jan 8 17:59:27 dropbear[1080]: Child connection from 192.168.20.1:43230
Jan 8 17:59:27 dropbear[1080]: Exit before auth: Exited normally
Jan 8 17:59:57 dropbear[1082]: Child connection from 192.168.20.1:44963
Jan 8 17:59:57 dropbear[1082]: Exit before auth: Exited normally
Jan 8 18:00:27 dropbear[1084]: Child connection from 192.168.20.1:46698
Jan 8 18:00:27 dropbear[1084]: Exit before auth: Exited normally
Jan 8 18:00:57 dropbear[1086]: Child connection from 192.168.20.1:48435
Jan 8 18:00:57 dropbear[1086]: Exit before auth: Exited normally
Jan 8 18:01:27 dropbear[1088]: Child connection from 192.168.20.1:50180
Jan 8 18:01:27 dropbear[1088]: Exit before auth: Exited normally
Jan 8 18:01:57 dropbear[1090]: Child connection from 192.168.20.1:51916
Jan 8 18:01:57 dropbear[1090]: Exit before auth: Exited normally
Jan 8 18:02:27 dropbear[1092]: Child connection from 192.168.20.1:53656
Jan 8 18:02:27 dropbear[1092]: Exit before auth: Exited normally
Jan 8 18:02:57 dropbear[1094]: Child connection from 192.168.20.1:55388
Jan 8 18:02:57 dropbear[1094]: Exit before auth: Exited normally
Jan 8 18:03:27 dropbear[1096]: Child connection from 192.168.20.1:57124
Jan 8 18:03:27 dropbear[1096]: Exit before auth: Exited normally
Jan 8 18:03:57 dropbear[1098]: Child connection from 192.168.20.1:58869
Jan 8 18:03:57 dropbear[1098]: Exit before auth: Exited normally
Jan 8 18:04:27 dropbear[1100]: Child connection from 192.168.20.1:60602
Jan 8 18:04:27 dropbear[1100]: Exit before auth: Exited normally
Jan 8 18:04:57 dropbear[1102]: Child connection from 192.168.20.1:34106
Jan 8 18:04:57 dropbear[1102]: Exit before auth: Exited normally
Jan 8 18:05:27 dropbear[1104]: Child connection from 192.168.20.1:35842
Jan 8 18:05:27 dropbear[1104]: Exit before auth: Exited normally
Jan 8 18:05:57 dropbear[1106]: Child connection from 192.168.20.1:37580
Jan 8 18:05:57 dropbear[1106]: Exit before auth: Exited normally
Jan 8 18:06:27 dropbear[1108]: Child connection from 192.168.20.1:39319
Jan 8 18:06:27 dropbear[1108]: Exit before auth: Exited normally
Jan 8 18:06:57 dropbear[1110]: Child connection from 192.168.20.1:41050
Jan 8 18:06:57 dropbear[1110]: Exit before auth: Exited normally
Jan 8 18:07:27 dropbear[1112]: Child connection from 192.168.20.1:42789
Jan 8 18:07:27 dropbear[1112]: Exit before auth: Exited normally
Jan 8 18:07:57 dropbear[1114]: Child connection from 192.168.20.1:44526
Jan 8 18:07:57 dropbear[1114]: Exit before auth: Exited normally
Jan 8 18:08:27 dropbear[1116]: Child connection from 192.168.20.1:46261
Jan 8 18:08:27 dropbear[1116]: Exit before auth: Exited normally
Jan 8 18:08:57 dropbear[1118]: Child connection from 192.168.20.1:48325
Jan 8 18:08:57 dropbear[1118]: Exit before auth: Exited normally
Jan 8 18:09:27 dropbear[1120]: Child connection from 192.168.20.1:50653
Jan 8 18:09:27 dropbear[1120]: Exit before auth: Exited normally
Jan 8 18:09:57 dropbear[1122]: Child connection from 192.168.20.1:52871
Jan 8 18:09:57 dropbear[1122]: Exit before auth: Exited normally
Jan 8 18:10:27 dropbear[1124]: Child connection from 192.168.20.1:55155
Jan 8 18:10:27 dropbear[1124]: Exit before auth: Exited normally
Jan 8 18:10:57 dropbear[1126]: Child connection from 192.168.20.1:57168
Jan 8 18:10:57 dropbear[1126]: Exit before auth: Exited normally
Jan 8 18:11:27 dropbear[1128]: Child connection from 192.168.20.1:58915
Jan 8 18:11:27 dropbear[1128]: Exit before auth: Exited normally
Jan 8 18:11:57 dropbear[1130]: Child connection from 192.168.20.1:60657
Jan 8 18:11:57 dropbear[1130]: Exit before auth: Exited normally
Jan 8 18:12:27 dropbear[1132]: Child connection from 192.168.20.1:34156
Jan 8 18:12:27 dropbear[1132]: Exit before auth: Exited normally
Jan 8 18:12:57 dropbear[1134]: Child connection from 192.168.20.1:35900
Jan 8 18:12:57 dropbear[1134]: Exit before auth: Exited normally
Jan 8 18:13:27 dropbear[1136]: Child connection from 192.168.20.1:37636
Jan 8 18:13:27 dropbear[1136]: Exit before auth: Exited normally
0 x

lacman
Příspěvky: 142
Registrován: 15 years ago

Příspěvekod lacman » 5 years ago

Ještě poznamenám že používám dude který běží pro ty zařízení právě na 20.1 a aircontrol který je ale úplně na jiné veřejné adrese.
0 x

Sidi
Příspěvky: 510
Registrován: 8 years ago

Příspěvekod Sidi » 5 years ago

lacman píše:Ještě poznamenám že používám dude který běží pro ty zařízení právě na 20.1 a aircontrol který je ale úplně na jiné veřejné adrese.


Jednoduchá pomoc. Pokud to je každých pár minut, tak stačí vypnout dude na 15 minut a pokud to přestane ... taky jsem se jednou lekl útoku a on to byl dude server :D
0 x