Bad password attempt for 'root' from路由器被远程SSH攻击解决方法

2019-05-25
0评论
/
2621阅读
爱搜啊

Bad password attempt for 'root' from路由器被远程SSH攻击解决方法

无意中进路由看了一下日志,竟然发现被人用穷举法破解秘密
我的OpenWRT是默认密码,所幸的没有破解成功对方就放弃了,改密码以后自己登陆也麻烦,于是firewall里面忽略所有来自外网的数据

Aug 27 19:08:59 OpenWrt authpriv.warn dropbear[1399]: Bad password attempt for 'root' from 219.136.246.22:35674
Aug 27 19:09:00 OpenWrt authpriv.info dropbear[1399]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:00 OpenWrt authpriv.info dropbear[1400]: Child connection from 219.136.246.22:36329
Aug 27 19:09:01 OpenWrt authpriv.warn dropbear[1400]: Bad password attempt for 'root' from 219.136.246.22:36329
Aug 27 19:09:01 OpenWrt authpriv.info dropbear[1400]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:01 OpenWrt authpriv.info dropbear[1401]: Child connection from 219.136.246.22:36981
Aug 27 19:09:03 OpenWrt authpriv.warn dropbear[1401]: Bad password attempt for 'root' from 219.136.246.22:36981
Aug 27 19:09:03 OpenWrt authpriv.info dropbear[1401]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:03 OpenWrt authpriv.info dropbear[1402]: Child connection from 219.136.246.22:37627
Aug 27 19:09:04 OpenWrt authpriv.warn dropbear[1402]: Bad password attempt for 'root' from 219.136.246.22:37627
Aug 27 19:09:05 OpenWrt authpriv.info dropbear[1402]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:05 OpenWrt authpriv.info dropbear[1403]: Child connection from 219.136.246.22:38220
Aug 27 19:09:06 OpenWrt authpriv.warn dropbear[1403]: Bad password attempt for 'root' from 219.136.246.22:38220
Aug 27 19:09:07 OpenWrt authpriv.info dropbear[1403]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:10 OpenWrt authpriv.info dropbear[1404]: Child connection from 219.136.246.22:38821
Aug 27 19:09:11 OpenWrt authpriv.warn dropbear[1404]: Bad password attempt for 'root' from 219.136.246.22:38821
Aug 27 19:09:11 OpenWrt authpriv.info dropbear[1404]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:11 OpenWrt authpriv.info dropbear[1405]: Child connection from 219.136.246.22:40402
Aug 27 19:09:13 OpenWrt authpriv.warn dropbear[1405]: Bad password attempt for 'root' from 219.136.246.22:40402
Aug 27 19:09:13 OpenWrt authpriv.info dropbear[1405]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:13 OpenWrt authpriv.info dropbear[1406]: Child connection from 219.136.246.22:40978
Aug 27 19:09:14 OpenWrt authpriv.warn dropbear[1406]: Bad password attempt for 'root' from 219.136.246.22:40978
Aug 27 19:09:15 OpenWrt authpriv.info dropbear[1406]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:15 OpenWrt authpriv.info dropbear[1407]: Child connection from 219.136.246.22:41595
Aug 27 19:09:16 OpenWrt authpriv.warn dropbear[1407]: Bad password attempt for 'root' from 219.136.246.22:41595
Aug 27 19:09:17 OpenWrt authpriv.info dropbear[1407]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:17 OpenWrt authpriv.info dropbear[1408]: Child connection from 219.136.246.22:42308
Aug 27 19:09:18 OpenWrt authpriv.warn dropbear[1408]: Bad password attempt for 'root' from 219.136.246.22:42308
Aug 27 19:09:19 OpenWrt authpriv.info dropbear[1408]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:19 OpenWrt authpriv.info dropbear[1409]: Child connection from 219.136.246.22:42891
Aug 27 19:09:20 OpenWrt authpriv.warn dropbear[1409]: Bad password attempt for 'root' from 219.136.246.22:42891
Aug 27 19:09:20 OpenWrt authpriv.info dropbear[1409]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:20 OpenWrt authpriv.info dropbear[1410]: Child connection from 219.136.246.22:43483
Aug 27 19:09:22 OpenWrt authpriv.warn dropbear[1410]: Bad password attempt for 'root' from 219.136.246.22:43483
Aug 27 19:09:22 OpenWrt authpriv.info dropbear[1410]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:22 OpenWrt authpriv.info dropbear[1411]: Child connection from 219.136.246.22:44032
Aug 27 19:09:24 OpenWrt authpriv.warn dropbear[1411]: Bad password attempt for 'root' from 219.136.246.22:44032
Aug 27 19:09:24 OpenWrt authpriv.info dropbear[1411]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:24 OpenWrt authpriv.info dropbear[1412]: Child connection from 219.136.246.22:44702
Aug 27 19:09:25 OpenWrt authpriv.warn dropbear[1412]: Bad password attempt for 'root' from 219.136.246.22:44702
Aug 27 19:09:26 OpenWrt authpriv.info dropbear[1412]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:26 OpenWrt authpriv.info dropbear[1413]: Child connection from 219.136.246.22:45264
Aug 27 19:09:27 OpenWrt authpriv.warn dropbear[1413]: Bad password attempt for 'root' from 219.136.246.22:45264
Aug 27 19:09:27 OpenWrt authpriv.info dropbear[1413]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:28 OpenWrt authpriv.info dropbear[1414]: Child connection from 219.136.246.22:45833
Aug 27 19:09:29 OpenWrt authpriv.warn dropbear[1414]: Bad password attempt for 'root' from 219.136.246.22:45833
Aug 27 19:09:30 OpenWrt authpriv.info dropbear[1414]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:30 OpenWrt authpriv.info dropbear[1415]: Child connection from 219.136.246.22:46564
Aug 27 19:09:31 OpenWrt authpriv.warn dropbear[1415]: Bad password attempt for 'root' from 219.136.246.22:46564
Aug 27 19:09:31 OpenWrt authpriv.info dropbear[1415]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:31 OpenWrt authpriv.info dropbear[1416]: Child connection from 219.136.246.22:47117
Aug 27 19:09:33 OpenWrt authpriv.warn dropbear[1416]: Bad password attempt for 'root' from 219.136.246.22:47117
Aug 27 19:09:33 OpenWrt authpriv.info dropbear[1416]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:33 OpenWrt authpriv.info dropbear[1417]: Child connection from 219.136.246.22:47636
Aug 27 19:09:35 OpenWrt authpriv.warn dropbear[1417]: Bad password attempt for 'root' from 219.136.246.22:47636
Aug 27 19:09:35 OpenWrt authpriv.info dropbear[1417]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:35 OpenWrt authpriv.info dropbear[1418]: Child connection from 219.136.246.22:48264
Aug 27 19:09:37 OpenWrt authpriv.warn dropbear[1418]: Bad password attempt for 'root' from 219.136.246.22:48264
Aug 27 19:09:37 OpenWrt authpriv.info dropbear[1418]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:37 OpenWrt authpriv.info dropbear[1419]: Child connection from 219.136.246.22:48914
Aug 27 19:09:38 OpenWrt authpriv.warn dropbear[1419]: Bad password attempt for 'root' from 219.136.246.22:48914
Aug 27 19:09:39 OpenWrt authpriv.info dropbear[1419]: Exit before auth (user 'root', 1 fails): Disconnect received

OpenWRT固件拒绝SSH/Luci密码破解攻击脚本 OpenWRT被SSH攻击怎么办?


本站附件分享,如果附件失效,可以去找找看

诚通网盘附件百度网盘附件


标签: OpenWRT SSH
于2019-05-25发布