tarakan Posted August 10, 2021 Share Posted August 10, 2021 Здравствуйте, сегодня обнаружил такие записи в логе Цитата Bad password attempt for 'root' from 8.142.96.158:41670 Авг 10 14:10:39 dropbear[2933] Exit before auth from <8.142.96.158:41670>: (user 'root', 1 fails): Exited normally Авг 10 14:10:39 dropbear[2943] Child connection from 8.142.96.158:42384 Авг 10 14:10:41 dropbear[2943] Bad password attempt for 'root' from 8.142.96.158:42384 Авг 10 14:10:42 dropbear[2953] Child connection from 8.142.96.158:43294 Авг 10 14:10:42 dropbear[2943] Exit before auth from <8.142.96.158:42384>: (user 'root', 1 fails): Exited normally Авг 10 14:10:44 dropbear[2953] Bad password attempt for 'root' from 8.142.96.158:43294 Авг 10 14:10:45 dropbear[2953] Exit before auth from <8.142.96.158:43294>: (user 'root', 1 fails): Exited normally Авг 10 14:10:46 dropbear[2976] Child connection from 8.142.96.158:44486 Авг 10 14:10:47 dropbear[2976] Bad password attempt for 'root' from 8.142.96.158:44486 Авг 10 14:10:48 dropbear[2987] Child connection from 8.142.96.158:45518 Авг 10 14:10:48 dropbear[2976] Exit before auth from <8.142.96.158:44486>: (user 'root', 1 fails): Exited normally Авг 10 14:10:50 dropbear[2987] Я так понимаю это идет перебор пароля для пользователя root. Подскажите как защититься? Quote Link to comment Share on other sites More sharing options...
Александр Рыжов Posted August 29, 2021 Share Posted August 29, 2021 Вроде бы ничего специфичного: либо настроить авторизацию по ключу, либо банить после нескольких попыток перебора. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.