SSAVbr Posted September 19, 2016 Share Posted September 19, 2016 (edited) Добрый день Имеется роутера(модель VIVA), к нему подключен интернет с белым ип. Сегодня проверил лог а там попытки взлома из вне, версия прошивки v2.07(AANT.2)C1 на всякий случай сменил пароль с 4 символьного на 32 Вот что было в логе Скрытый текст Sep 19 05:32:55ndm Core::Authenticator: no such user: "shell". Sep 19 05:32:57telnetd 188.18.24.32 client disconnected. Sep 19 05:32:57ndm Core::Session: client disconnected. Sep 19 05:32:57telnetd a new connection from 188.18.24.32 accepted. Sep 19 05:32:57ndm Core::Server: started Session 127.0.0.1:0. Sep 19 05:32:57ndm Core::Authenticator: generating. Sep 19 05:33:00ndm Core::Authenticator: generating. Sep 19 05:33:00ndm Core::Authenticator: user "admin": invalid password. Sep 19 05:33:02ndm Core::Authenticator: no such user: "enable". Sep 19 05:33:04ndm Core::Authenticator: no such user: "shell". Sep 19 05:33:06telnetd 188.18.24.32 client disconnected. Sep 19 05:33:06ndm Core::Session: client disconnected. Sep 19 05:33:06telnetd a new connection from 188.18.24.32 accepted. Sep 19 05:33:06ndm Core::Server: started Session 127.0.0.1:0. Sep 19 05:33:06ndm Core::Authenticator: generating. Sep 19 05:33:08ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 05:33:10ndm Core::Authenticator: no such user: "enable". Sep 19 05:33:12ndm Core::Authenticator: no such user: "shell". Sep 19 05:33:14telnetd 188.18.24.32 client disconnected. Sep 19 05:33:14ndm Core::Session: client disconnected. Sep 19 05:33:17telnetd a new connection from 188.18.24.32 accepted. Sep 19 05:33:17ndm Core::Server: started Session 127.0.0.1:0. Sep 19 05:33:17ndm Core::Authenticator: generating. Sep 19 05:33:19ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 05:33:22ndm Core::Authenticator: no such user: "enable". Sep 19 05:33:24ndm Core::Authenticator: no such user: "shell". Sep 19 05:33:26telnetd 188.18.24.32 client disconnected. Sep 19 05:33:26ndm Core::Session: client disconnected. Sep 19 05:33:26telnetd a new connection from 188.18.24.32 accepted. Sep 19 05:33:26ndm Core::Server: started Session 127.0.0.1:0. Sep 19 05:33:26ndm Core::Authenticator: generating. Sep 19 05:33:28ndm Core::Authenticator: generating. Sep 19 05:33:28ndm Core::Authenticator: user "admin": invalid password. Sep 19 05:33:30ndm Core::Authenticator: no such user: "enable". Sep 19 05:33:32ndm Core::Authenticator: no such user: "shell". Sep 19 05:33:34telnetd 188.18.24.32 client disconnected. Sep 19 05:33:34ndm Core::Session: client disconnected. Sep 19 05:33:34telnetd a new connection from 188.18.24.32 accepted. Sep 19 05:33:34ndm Core::Server: started Session 127.0.0.1:0. Sep 19 05:33:34ndm Core::Authenticator: generating. Sep 19 05:33:36ndm Core::Authenticator: generating. Sep 19 05:33:36ndm Core::Authenticator: user "admin": invalid password. Sep 19 05:33:38ndm Core::Authenticator: no such user: "enable". Sep 19 05:33:41ndm Core::Authenticator: no such user: "shell". Sep 19 05:33:42telnetd 188.18.24.32 client disconnected. Sep 19 05:33:42ndm Core::Session: client disconnected. Sep 19 05:33:43telnetd a new connection from 188.18.24.32 accepted. Sep 19 05:33:43ndm Core::Server: started Session 127.0.0.1:0. Sep 19 05:33:43ndm Core::Authenticator: generating. Sep 19 05:33:45ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 05:33:47ndm Core::Authenticator: no such user: "enable". Sep 19 05:33:49ndm Core::Authenticator: no such user: "shell". Sep 19 05:33:51telnetd 188.18.24.32 client disconnected. Sep 19 05:33:51ndm Core::Session: client disconnected. Sep 19 05:33:51telnetd a new connection from 188.18.24.32 accepted. Sep 19 05:33:51ndm Core::Server: started Session 127.0.0.1:0. Sep 19 05:33:51ndm Core::Authenticator: generating. Sep 19 05:33:53ndm Core::Authenticator: generating. Sep 19 05:33:53ndm Core::Authenticator: user "admin": invalid password. Sep 19 05:33:56ndm Core::Authenticator: no such user: "enable". Sep 19 05:33:58ndm Core::Authenticator: no such user: "shell". Sep 19 05:34:00telnetd 188.18.24.32 client disconnected. Sep 19 05:34:00ndm Core::Session: client disconnected. Sep 19 05:34:00telnetd a new connection from 188.18.24.32 accepted. Sep 19 05:34:00ndm Core::Server: started Session 127.0.0.1:0. Sep 19 05:34:00ndm Core::Authenticator: generating. Sep 19 05:34:02ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 05:34:04ndm Core::Authenticator: no such user: "enable". Sep 19 05:34:06ndm Core::Authenticator: no such user: "shell". Sep 19 05:34:08telnetd 188.18.24.32 client disconnected. Sep 19 05:34:08ndm Core::Session: client disconnected. Sep 19 06:17:59telnetd a new connection from 2.178.184.136 accepted. Sep 19 06:17:59ndm Core::Server: started Session 127.0.0.1:0. Sep 19 06:17:59ndm Core::Authenticator: generating. Sep 19 06:18:02ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 06:18:04ndm Core::Authenticator: no such user: "enable". Sep 19 06:18:07ndm Core::Authenticator: no such user: "shell". Sep 19 06:18:09telnetd 2.178.184.136 client disconnected. Sep 19 06:18:09ndm Core::Session: client disconnected. Sep 19 06:18:09telnetd a new connection from 2.178.184.136 accepted. Sep 19 06:18:09ndm Core::Server: started Session 127.0.0.1:0. Sep 19 06:18:09ndm Core::Authenticator: generating. Sep 19 06:18:12ndm Core::Authenticator: generating. Sep 19 06:18:12ndm Core::Authenticator: user "admin": invalid password. Sep 19 06:18:14ndm Core::Authenticator: no such user: "enable". Sep 19 06:18:17ndm Core::Authenticator: no such user: "shell". Sep 19 06:18:19telnetd 2.178.184.136 client disconnected. Sep 19 06:18:19ndm Core::Session: client disconnected. Sep 19 06:18:19telnetd a new connection from 2.178.184.136 accepted. Sep 19 06:18:19ndm Core::Server: started Session 127.0.0.1:0. Sep 19 06:18:19ndm Core::Authenticator: generating. Sep 19 06:18:22ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 06:18:24ndm Core::Authenticator: no such user: "enable". Sep 19 06:18:27ndm Core::Authenticator: no such user: "shell". Sep 19 06:18:28telnetd 2.178.184.136 client disconnected. Sep 19 06:18:28ndm Core::Session: client disconnected. Sep 19 06:18:29telnetd a new connection from 2.178.184.136 accepted. Sep 19 06:18:29ndm Core::Server: started Session 127.0.0.1:0. Sep 19 06:18:29ndm Core::Authenticator: generating. Sep 19 06:18:31ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 06:18:34ndm Core::Authenticator: no such user: "enable". Sep 19 06:18:36ndm Core::Authenticator: no such user: "shell". Sep 19 06:18:38telnetd 2.178.184.136 client disconnected. Sep 19 06:18:38ndm Core::Session: client disconnected. Sep 19 06:18:39telnetd a new connection from 2.178.184.136 accepted. Sep 19 06:18:39ndm Core::Server: started Session 127.0.0.1:0. Sep 19 06:18:39ndm Core::Authenticator: generating. Sep 19 06:18:41ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 06:18:44ndm Core::Authenticator: no such user: "enable". Sep 19 06:18:46ndm Core::Authenticator: no such user: "shell". Sep 19 06:18:48telnetd 2.178.184.136 client disconnected. Sep 19 06:18:48ndm Core::Session: client disconnected. Sep 19 06:18:49telnetd a new connection from 2.178.184.136 accepted. Sep 19 06:18:49ndm Core::Server: started Session 127.0.0.1:0. Sep 19 06:18:49ndm Core::Authenticator: generating. Sep 19 06:18:51ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 06:18:54ndm Core::Authenticator: no such user: "enable". Sep 19 06:18:56ndm Core::Authenticator: no such user: "shell". Sep 19 06:18:58telnetd 2.178.184.136 client disconnected. Sep 19 06:18:58ndm Core::Session: client disconnected. Sep 19 06:18:58telnetd a new connection from 2.178.184.136 accepted. Sep 19 06:18:58ndm Core::Server: started Session 127.0.0.1:0. Sep 19 06:18:58ndm Core::Authenticator: generating. Sep 19 06:19:01ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 06:19:03ndm Core::Authenticator: no such user: "enable". Sep 19 06:19:06ndm Core::Authenticator: no such user: "shell". Sep 19 06:19:08telnetd 2.178.184.136 client disconnected. Sep 19 06:19:08ndm Core::Session: client disconnected. Sep 19 06:19:08telnetd a new connection from 2.178.184.136 accepted. Sep 19 06:19:08ndm Core::Server: started Session 127.0.0.1:0. Sep 19 06:19:08ndm Core::Authenticator: generating. Sep 19 06:19:11ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 06:19:13ndm Core::Authenticator: no such user: "enable". Sep 19 06:19:16ndm Core::Authenticator: no such user: "shell". Sep 19 06:19:18telnetd 2.178.184.136 client disconnected. Sep 19 06:19:18ndm Core::Session: client disconnected. Sep 19 06:19:18telnetd a new connection from 2.178.184.136 accepted. Sep 19 06:19:18ndm Core::Server: started Session 127.0.0.1:0. Sep 19 06:19:18ndm Core::Authenticator: generating. Sep 19 06:19:21ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 06:19:23ndm Core::Authenticator: no such user: "enable". Sep 19 06:19:26ndm Core::Authenticator: no such user: "shell". Sep 19 06:19:27telnetd 2.178.184.136 client disconnected. Sep 19 06:19:27ndm Core::Session: client disconnected. Sep 19 06:19:28telnetd a new connection from 2.178.184.136 accepted. Sep 19 06:19:28ndm Core::Server: started Session 127.0.0.1:0. Sep 19 06:19:28ndm Core::Authenticator: generating. Sep 19 06:19:30ndm Core::Authenticator: generating. Sep 19 06:19:33ndm Core::Authenticator: no such user: "enable". Sep 19 06:19:35ndm Core::Authenticator: no such user: "shell". Sep 19 06:19:37telnetd 2.178.184.136 client disconnected. Sep 19 06:19:37ndm Core::Session: client disconnected. Sep 19 07:14:15telnetd a new connection from 188.16.61.136 accepted. Sep 19 07:14:15ndm Core::Server: started Session 127.0.0.1:0. Sep 19 07:14:15ndm Core::Authenticator: generating. Sep 19 07:14:17ndm Core::Authenticator: no such user: "admin1". Sep 19 07:14:19ndm Core::Authenticator: no such user: "enable". Sep 19 07:14:21ndm Core::Authenticator: no such user: "shell". Sep 19 07:14:23telnetd 188.16.61.136 client disconnected. Sep 19 07:14:23ndm Core::Session: client disconnected. Sep 19 07:14:23telnetd a new connection from 188.16.61.136 accepted. Sep 19 07:14:23ndm Core::Server: started Session 127.0.0.1:0. Sep 19 07:14:23ndm Core::Authenticator: generating. Sep 19 07:14:25ndm Core::Authenticator: generating. Sep 19 07:14:25ndm Core::Authenticator: user "admin": invalid password. Sep 19 07:14:27ndm Core::Authenticator: no such user: "enable". Sep 19 07:14:29ndm Core::Authenticator: no such user: "shell". Sep 19 07:14:31telnetd 188.16.61.136 client disconnected. Sep 19 07:14:31ndm Core::Session: client disconnected. Sep 19 07:14:31telnetd a new connection from 188.16.61.136 accepted. Sep 19 07:14:31ndm Core::Server: started Session 127.0.0.1:0. Sep 19 07:14:31ndm Core::Authenticator: generating. Sep 19 07:14:33ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 07:14:35ndm Core::Authenticator: no such user: "enable". Sep 19 07:14:37ndm Core::Authenticator: no such user: "shell". Sep 19 07:14:39telnetd 188.16.61.136 client disconnected. Sep 19 07:14:39ndm Core::Session: client disconnected. Sep 19 07:14:39telnetd a new connection from 188.16.61.136 accepted. Sep 19 07:14:39ndm Core::Server: started Session 127.0.0.1:0. Sep 19 07:14:39ndm Core::Authenticator: generating. Sep 19 07:14:42ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 07:14:44ndm Core::Authenticator: no such user: "enable". Sep 19 07:14:46ndm Core::Authenticator: no such user: "shell". Sep 19 07:14:47telnetd 188.16.61.136 client disconnected. Sep 19 07:14:47ndm Core::Session: client disconnected. Sep 19 07:14:48telnetd a new connection from 188.16.61.136 accepted. Sep 19 07:14:48ndm Core::Server: started Session 127.0.0.1:0. Sep 19 07:14:48ndm Core::Authenticator: generating. Sep 19 07:14:50ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 07:14:52ndm Core::Authenticator: no such user: "enable". Sep 19 07:14:54ndm Core::Authenticator: no such user: "shell". Sep 19 07:14:56telnetd 188.16.61.136 client disconnected. Sep 19 07:14:56ndm Core::Session: client disconnected. Sep 19 07:14:56telnetd a new connection from 188.16.61.136 accepted. Sep 19 07:14:56ndm Core::Server: started Session 127.0.0.1:0. Sep 19 07:14:56ndm Core::Authenticator: generating. Sep 19 07:14:58ndm Core::Authenticator: generating. Sep 19 07:14:58ndm Core::Authenticator: user "admin": invalid password. Sep 19 07:15:00ndm Core::Authenticator: no such user: "enable". Sep 19 07:15:02ndm Core::Authenticator: no such user: "shell". Sep 19 07:15:04telnetd 188.16.61.136 client disconnected. Sep 19 07:15:04ndm Core::Session: client disconnected. Sep 19 07:15:04telnetd a new connection from 188.16.61.136 accepted. Sep 19 07:15:04ndm Core::Server: started Session 127.0.0.1:0. Sep 19 07:15:04ndm Core::Authenticator: generating. Sep 19 07:15:06ndm Core::Authenticator: no such user: "service". Sep 19 07:15:08ndm Core::Authenticator: no such user: "enable". Sep 19 07:15:10ndm Core::Authenticator: no such user: "shell". Sep 19 07:15:12telnetd 188.16.61.136 client disconnected. Sep 19 07:15:12ndm Core::Session: client disconnected. Sep 19 08:29:41telnetd a new connection from 188.17.35.250 accepted. Sep 19 08:29:41ndm Core::Server: started Session 127.0.0.1:0. Sep 19 08:29:41ndm Core::Authenticator: generating. Sep 19 08:29:48ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 08:30:19ndm Core::Authenticator: no such user: "enable". Sep 19 08:31:53telnetd 188.17.35.250 client disconnected. Sep 19 08:31:53ndm Core::Session: client disconnected. Sep 19 08:38:43telnetd a new connection from 188.19.217.22 accepted. Sep 19 08:38:43ndm Core::Server: started Session 127.0.0.1:0. Sep 19 08:38:43ndm Core::Authenticator: generating. Sep 19 08:38:45ndm Core::Authenticator: generating. Sep 19 08:38:45ndm Core::Authenticator: user "admin": invalid password. Sep 19 08:38:47ndm Core::Authenticator: no such user: "enable". Sep 19 08:38:49ndm Core::Authenticator: no such user: "shell". Sep 19 08:38:51telnetd 188.19.217.22 client disconnected. Sep 19 08:38:51ndm Core::Session: client disconnected. Sep 19 08:38:51telnetd a new connection from 188.19.217.22 accepted. Sep 19 08:38:51ndm Core::Server: started Session 127.0.0.1:0. Sep 19 08:38:51ndm Core::Authenticator: generating. Sep 19 08:38:53ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 08:38:56ndm Core::Authenticator: no such user: "enable". Sep 19 08:38:58ndm Core::Authenticator: no such user: "shell". Sep 19 08:39:00telnetd 188.19.217.22 client disconnected. Sep 19 08:39:00ndm Core::Session: client disconnected. Sep 19 08:39:00telnetd a new connection from 188.19.217.22 accepted. Sep 19 08:39:00ndm Core::Server: started Session 127.0.0.1:0. Sep 19 08:39:00ndm Core::Authenticator: generating. Sep 19 08:39:02ndm Core::Authenticator: no such user: "service". Sep 19 08:39:04ndm Core::Authenticator: no such user: "enable". Sep 19 08:39:06ndm Core::Authenticator: no such user: "shell". Sep 19 08:39:08telnetd 188.19.217.22 client disconnected. Sep 19 08:39:08ndm Core::Session: client disconnected. Sep 19 08:39:08telnetd a new connection from 188.19.217.22 accepted. Sep 19 08:39:08ndm Core::Server: started Session 127.0.0.1:0. Sep 19 08:39:08ndm Core::Authenticator: generating. Sep 19 08:39:10ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 08:39:12ndm Core::Authenticator: no such user: "enable". Sep 19 08:39:15ndm Core::Authenticator: no such user: "shell". Sep 19 08:39:17telnetd 188.19.217.22 client disconnected. Sep 19 08:39:17ndm Core::Session: client disconnected. Sep 19 08:39:17telnetd a new connection from 188.19.217.22 accepted. Sep 19 08:39:17ndm Core::Server: started Session 127.0.0.1:0. Sep 19 08:39:17ndm Core::Authenticator: generating. Sep 19 08:39:19ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 08:39:21ndm Core::Authenticator: no such user: "enable". Sep 19 08:39:23ndm Core::Authenticator: no such user: "shell". Sep 19 08:39:25telnetd 188.19.217.22 client disconnected. Sep 19 08:39:25ndm Core::Session: client disconnected. Sep 19 08:39:25telnetd a new connection from 188.19.217.22 accepted. Sep 19 08:39:25ndm Core::Server: started Session 127.0.0.1:0. Sep 19 08:39:25ndm Core::Authenticator: generating. Sep 19 08:39:27ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 08:39:29ndm Core::Authenticator: no such user: "enable". Sep 19 08:39:32ndm Core::Authenticator: no such user: "shell". Sep 19 08:39:33telnetd 188.19.217.22 client disconnected. Sep 19 08:39:33ndm Core::Session: client disconnected. Sep 19 08:39:34telnetd a new connection from 188.19.217.22 accepted. Sep 19 08:39:34ndm Core::Server: started Session 127.0.0.1:0. Sep 19 08:39:34ndm Core::Authenticator: generating. Sep 19 08:39:36ndm Core::Authenticator: generating. Sep 19 08:39:36ndm Core::Authenticator: user "admin": invalid password. Sep 19 08:39:38ndm Core::Authenticator: no such user: "enable". Sep 19 08:39:40ndm Core::Authenticator: no such user: "shell". Sep 19 08:39:42telnetd 188.19.217.22 client disconnected. Sep 19 08:39:42ndm Core::Session: client disconnected. Sep 19 08:39:42telnetd a new connection from 188.19.217.22 accepted. Sep 19 08:39:42ndm Core::Server: started Session 127.0.0.1:0. Sep 19 08:39:42ndm Core::Authenticator: generating. Sep 19 08:39:44ndm Core::Authenticator: generating. Sep 19 08:39:44ndm Core::Authenticator: user "admin": invalid password. Sep 19 08:39:46ndm Core::Authenticator: no such user: "enable". Sep 19 08:39:48ndm Core::Authenticator: no such user: "shell". Sep 19 08:39:50telnetd 188.19.217.22 client disconnected. Sep 19 08:39:50ndm Core::Session: client disconnected. Sep 19 08:39:50telnetd a new connection from 188.19.217.22 accepted. Sep 19 08:39:50ndm Core::Server: started Session 127.0.0.1:0. Sep 19 08:39:50ndm Core::Authenticator: generating. Sep 19 08:39:53ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 08:39:55ndm Core::Authenticator: no such user: "enable". Sep 19 08:39:57ndm Core::Authenticator: no such user: "shell". Sep 19 08:39:59telnetd 188.19.217.22 client disconnected. Sep 19 08:39:59ndm Core::Session: client disconnected. Sep 19 08:39:59telnetd a new connection from 188.19.217.22 accepted. Sep 19 08:39:59ndm Core::Server: started Session 127.0.0.1:0. Sep 19 08:39:59ndm Core::Authenticator: generating. Sep 19 08:40:01ndm Core::Authenticator: access to "cli" denied for user "root". Sep 19 08:40:03ndm Core::Authenticator: no such user: "enable". Sep 19 08:40:05ndm Core::Authenticator: no such user: "shell". Sep 19 08:40:07telnetd 188.19.217.22 client disconnected. Sep 19 08:40:07ndm Core::Session: client disconnected. Edited September 19, 2016 by SSAVbr Quote Link to comment Share on other sites More sharing options...
1 SSAVbr Posted April 21, 2018 Author Share Posted April 21, 2018 В 20.04.2018 в 19:13, Григорий Львов сказал: Проверил. Вот это не помогает. Флажки все отключены, однако, всё равно по телнету долбятся. См. ниже: Приветствую, по идее всё ок по настройкам, попробуйте посмотреть что в стартовом конфиге, должно стоять private Quote Link to comment Share on other sites More sharing options...
1 Le ecureuil Posted April 23, 2018 Share Posted April 23, 2018 В 4/21/2018 в 23:39, SSAVbr сказал: Приветствую, по идее всё ок по настройкам, попробуйте посмотреть что в стартовом конфиге, должно стоять private Покажите еще что у вас в ACL, а то если вы руками открыли доступ в ACL, то это имеет приоритет над security-level. Quote Link to comment Share on other sites More sharing options...
1 MDP Posted April 23, 2018 Share Posted April 23, 2018 21 минуту назад, Григорий Львов сказал: Спасибо! Стартовый конфиг проверил, везде, где надо private стоит. Где тут доступ в ACL смотреть не нашёл. Проблему пока решил поменяв номер порта командной строки. Резко полегчало. Межсетевой экран, внешний интерфейс (тот который на провайдера идет) 1 Quote Link to comment Share on other sites More sharing options...
1 MDP Posted April 23, 2018 Share Posted April 23, 2018 1 минуту назад, Григорий Львов сказал: У меня на роутере VPN-сервер. Там permit по TCP, ICMP,UDP стоит. Иначе не пашет канал. VPN сервер сам умеет то что ему нужно открывать....а ICMP тут уж точно лишнее... Ну тогда поставь правило выше deny для 23 порта .... А VPN сервер какой? 1 Quote Link to comment Share on other sites More sharing options...
1 MDP Posted April 23, 2018 Share Posted April 23, 2018 (edited) 5 минут назад, Григорий Львов сказал: Во! Просветлил. Чего-то я сам не допёр насчёт блокировки порта через файрвол. Спасибо! На счёт ICMP я там VPN настраивал тупо по инструкции, не особо вдаваясь, что там зачем. Заработал, и забыл его. А проблему с портом разрулил по-колхозному, -- вбил туда номер с потолка вместо 23, ну супостат и свалил. Сейчас логи чистые. Дык это всё равно не решение проблемы ...с таким же успехом к Вам будут ломиться по 80 порту в вэб-морду. PPTP у меня без таких выкрутасов работает нормально....компонента шлюза прикладного уровня PPTP стоит? Edited April 23, 2018 by MDP 1 Quote Link to comment Share on other sites More sharing options...
0 hellonow Posted September 19, 2016 Share Posted September 19, 2016 (edited) 188.18.24.32 и другие айпи, добавьте в межсетевой экран и заблокируйте у них всю подсеть. и сгенерируйте сложный пароль. я таких "товарищей" каждый день в логах вижу на разных роутерах Edited September 19, 2016 by enpa Quote Link to comment Share on other sites More sharing options...
0 SSAVbr Posted September 19, 2016 Author Share Posted September 19, 2016 (edited) 3 минуты назад, enpa сказал: 188.18.24.32 и другие айпи, добавьте в межсетевой экран и заблокируйте у них всю подсеть. уже это сделал, для обхода блокировки по ип адресу, они могут юзать прокси Edited September 19, 2016 by SSAVbr Quote Link to comment Share on other sites More sharing options...
0 hellonow Posted September 19, 2016 Share Posted September 19, 2016 Sep 18 00:44:33sberoffice nginx(conn: *295) user "admin": password mismatch, client: 185.159.36.13 Sep 18 00:44:36sberoffice nginx(conn: *296) user "admin": password mismatch, client: 185.159.36.13 Sep 18 00:44:39sberoffice nginx(conn: *297) user "admin": password mismatch, client: 185.159.36.13 Sep 18 00:44:42sberoffice nginx(conn: *298) user "admin": password mismatch, client: 185.159.36.13 Sep 18 00:44:45sberoffice nginx(conn: *299) user "Admin" was not found in config, client: 185.159.36.13 Sep 18 00:44:45ndmHttp::Manager: ban remote host 185.159.36.13 for 15 minutes. Sep 18 00:59:45ndmHttp::Manager: unban remote host 185.159.36.13. вот вчера, товарищ ко мне рвался Quote Link to comment Share on other sites More sharing options...
0 SSAVbr Posted September 19, 2016 Author Share Posted September 19, 2016 1 минуту назад, enpa сказал: Sep 18 00:44:33sberoffice nginx(conn: *295) user "admin": password mismatch, client: 185.159.36.13 Sep 18 00:44:36sberoffice nginx(conn: *296) user "admin": password mismatch, client: 185.159.36.13 Sep 18 00:44:39sberoffice nginx(conn: *297) user "admin": password mismatch, client: 185.159.36.13 Sep 18 00:44:42sberoffice nginx(conn: *298) user "admin": password mismatch, client: 185.159.36.13 Sep 18 00:44:45sberoffice nginx(conn: *299) user "Admin" was not found in config, client: 185.159.36.13 Sep 18 00:44:45ndmHttp::Manager: ban remote host 185.159.36.13 for 15 minutes. Sep 18 00:59:45ndmHttp::Manager: unban remote host 185.159.36.13. вот вчера, товарищ ко мне рвался Видимо это какая-то бот сеть роутеры ломает Quote Link to comment Share on other sites More sharing options...
0 Le ecureuil Posted September 19, 2016 Share Posted September 19, 2016 Закройте telnet для доступа снаружи, зачем он вам там? 1 Quote Link to comment Share on other sites More sharing options...
0 SSAVbr Posted September 19, 2016 Author Share Posted September 19, 2016 1 минуту назад, Le ecureuil сказал: Закройте telnet для доступа снаружи, зачем он вам там? а он разве не закрыт по стандарту? а закрывать надо то же через телнет? Quote Link to comment Share on other sites More sharing options...
0 SSAVbr Posted September 19, 2016 Author Share Posted September 19, 2016 (edited) 8 минут назад, Le ecureuil сказал: Закройте telnet для доступа снаружи, зачем он вам там? вот я нашел команду в CLI мануале no service telnet я так понимаю она полностью вырубает телнет Edited September 19, 2016 by SSAVbr Quote Link to comment Share on other sites More sharing options...
0 hellonow Posted September 19, 2016 Share Posted September 19, 2016 3 часа назад, Le ecureuil сказал: Закройте telnet для доступа снаружи, зачем он вам там? хмм, так закрыт же порт для телнета, эти товарищи рвутся через 80ый порт, в настройки роутера, через веб, разве нет? Quote Link to comment Share on other sites More sharing options...
0 SSAVbr Posted September 19, 2016 Author Share Posted September 19, 2016 8 минут назад, enpa сказал: хмм, так закрыт же порт для телнета, эти товарищи рвутся через 80ый порт, в настройки роутера, через веб, разве нет? в моей прошивки нет v2.07(AANT.2)C1 сейчас перепрошил роутер на бета отладочную версию v2.08(AANT.3)A7 появились вот такие настройки.Убрал ип из запрета, пока попыток взлома не было Quote Link to comment Share on other sites More sharing options...
0 Deshunin Sergey Posted September 19, 2016 Share Posted September 19, 2016 3 часа назад, Le ecureuil сказал: Закройте telnet для доступа снаружи, зачем он вам там? А разве это не тоже самое, описанное здесь? Quote Link to comment Share on other sites More sharing options...
0 SSAVbr Posted September 19, 2016 Author Share Posted September 19, 2016 2 минуты назад, Fandor сказал: А разве это не тоже самое, описанное здесь? да ситуация схожа Quote Link to comment Share on other sites More sharing options...
0 Deshunin Sergey Posted September 19, 2016 Share Posted September 19, 2016 (edited) 6 часов назад, SSAVbr сказал: да ситуация схожа Да не схожая, а один в один: перебор паролей/логинов с целью получения доступа к веб-морде роутера. Проблема решена в 2.08.А4.0-0 Edited September 19, 2016 by Fandor Quote Link to comment Share on other sites More sharing options...
0 SSAVbr Posted September 19, 2016 Author Share Posted September 19, 2016 (edited) 5 минут назад, Fandor сказал: Да не схожая, а один в один: перебор полей/логинов с целью получения доступа к веб-морде роутера. Проблема решена в 2.08.А4.0-0 а когда перебирали пароли роутер был на v2.07(AANT.2)C1 а сейчас я прошил v2.08(AANT.3)A7 и в логах пока что то чисто Плохо что до стабильной версии эти жизненно необходимые фишки долго идут Edited September 19, 2016 by SSAVbr 1 Quote Link to comment Share on other sites More sharing options...
0 Deshunin Sergey Posted September 19, 2016 Share Posted September 19, 2016 12 минуты назад, SSAVbr сказал: а когда перебирали пароли роутер был на v2.07(AANT.2)C1 а сейчас я прошил v2.08(AANT.3)A7 и в логах пока что то чисто Потому что функция блокировка роботов, перебирающих HTTP-пароли по умолчанию в прошивке включена. Quote Link to comment Share on other sites More sharing options...
0 S_A Posted September 19, 2016 Share Posted September 19, 2016 8 часов назад, Le ecureuil сказал: Закройте telnet для доступа снаружи, зачем он вам там? На самом деле, зачем web-рожу или telnet наружу выставлять? Ну а если выставили, то чему удивляться, что по открытым портам кто-то пытается залезть? Quote Link to comment Share on other sites More sharing options...
0 SSAVbr Posted September 19, 2016 Author Share Posted September 19, 2016 (edited) 23 минуты назад, S_A сказал: На самом деле, зачем web-рожу или telnet наружу выставлять? Ну а если выставили, то чему удивляться, что по открытым портам кто-то пытается залезть? Проблема в том что когда роутер был с прошивкой v2.07(AANT.2)C1(релизная версия) то как я понимаю по стандарту телнет был доступен из вне, и этим кто то решил воспользоваться, а в прошивке v2.08(AANT.3)A7(отладочная бета версия) это исправили и ещё добавили настроечки на доступ из вне, как по телнету так и по веб интерфейсу + добавили защиту от перебора пароля Скрытый текст Edited September 19, 2016 by SSAVbr Quote Link to comment Share on other sites More sharing options...
0 Deshunin Sergey Posted September 19, 2016 Share Posted September 19, 2016 58 минут назад, SSAVbr сказал: Проблема в том что когда роутер был с прошивкой v2.07(AANT.2)C1(релизная версия) то как я понимаю по стандарту телнет был доступен из вне, и этим кто то решил воспользоваться, а в прошивке v2.08(AANT.3)A7(отладочная бета версия) это исправили и ещё добавили настроечки на доступ из вне, как по телнету так и по веб интерфейсу + добавили защиту от перебора пароля Ларчик просто открывался: Quote Link to comment Share on other sites More sharing options...
0 SSAVbr Posted September 19, 2016 Author Share Posted September 19, 2016 1 минуту назад, Fandor сказал: Ларчик просто открывался: ммм интересно Quote Link to comment Share on other sites More sharing options...
0 Deshunin Sergey Posted September 19, 2016 Share Posted September 19, 2016 8 минут назад, SSAVbr сказал: ммм интересно А ведь я отсылал вас к теме, где было это сообщение. Не внимательно читали видимо. Долбят всех без разбора роботами, на авось. Quote Link to comment Share on other sites More sharing options...
0 Rezdbic Posted September 20, 2016 Share Posted September 20, 2016 Интересно, а если пробьются, то дальше что делать будут? Quote Link to comment Share on other sites More sharing options...
0 l3kar Posted September 20, 2016 Share Posted September 20, 2016 (edited) 4 часа назад, Rezdbic сказал: Интересно, а если пробьются, то дальше что делать будут? Как вариант: Прописывают свои DNS сервера. В итоге, ты хочешь зайти, например, на vk.com и попадаешь на страничку злоумышленников копирующую страницу авторизации вконтакта (при этом в адресной строке будет https://vk.com). После ввода логина/пароля тебя перекидывает уже на настоящий сайт вконтакте, а злоумышленник получает твой логин/пароль. Edited September 20, 2016 by l3kar Quote Link to comment Share on other sites More sharing options...
0 IgaX Posted September 20, 2016 Share Posted September 20, 2016 1 час назад, l3kar сказал: в адресной строке будет https:// параноиков этим не пробьешь, они сами сертификаты проверяют 1 Quote Link to comment Share on other sites More sharing options...
0 Григорий Львов Posted April 20, 2018 Share Posted April 20, 2018 (edited) В 19.09.2016 в 14:45, SSAVbr сказал: в моей прошивки нет v2.07(AANT.2)C1 сейчас перепрошил роутер на бета отладочную версию v2.08(AANT.3)A7 появились вот такие настройки.Убрал ип из запрета, пока попыток взлома не было Проверил. Вот это не помогает. Флажки все отключены, однако, всё равно по телнету долбятся. См. ниже: Edited April 20, 2018 by Григорий Львов Quote Link to comment Share on other sites More sharing options...
0 Григорий Львов Posted April 23, 2018 Share Posted April 23, 2018 (edited) 1 час назад, Le ecureuil сказал: Покажите еще что у вас в ACL, а то если вы руками открыли доступ в ACL, то это имеет приоритет над security-level. Спасибо! Стартовый конфиг проверил, везде, где надо private стоит. Где тут доступ в ACL смотреть не нашёл. Проблему пока решил поменяв номер порта командной строки. Резко полегчало. Edited April 23, 2018 by Григорий Львов Quote Link to comment Share on other sites More sharing options...
0 Григорий Львов Posted April 23, 2018 Share Posted April 23, 2018 11 минуту назад, MDP сказал: Межсетевой экран, внешний интерфейс (тот который на провайдера идет) У меня на роутере VPN-сервер. Там permit по TCP, ICMP,UDP стоит. Иначе не пашет канал. Quote Link to comment Share on other sites More sharing options...
Question
SSAVbr
Добрый день
Имеется роутера(модель VIVA), к нему подключен интернет с белым ип.
Сегодня проверил лог а там попытки взлома из вне, версия прошивки v2.07(AANT.2)C1 на всякий случай сменил пароль с 4 символьного на 32
Вот что было в логе
Sep 19 05:32:55ndm
Core::Authenticator: no such user: "shell".
Sep 19 05:32:57telnetd
188.18.24.32 client disconnected.
Sep 19 05:32:57ndm
Core::Session: client disconnected.
Sep 19 05:32:57telnetd
a new connection from 188.18.24.32 accepted.
Sep 19 05:32:57ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 05:32:57ndm
Core::Authenticator: generating.
Sep 19 05:33:00ndm
Core::Authenticator: generating.
Sep 19 05:33:00ndm
Core::Authenticator: user "admin": invalid password.
Sep 19 05:33:02ndm
Core::Authenticator: no such user: "enable".
Sep 19 05:33:04ndm
Core::Authenticator: no such user: "shell".
Sep 19 05:33:06telnetd
188.18.24.32 client disconnected.
Sep 19 05:33:06ndm
Core::Session: client disconnected.
Sep 19 05:33:06telnetd
a new connection from 188.18.24.32 accepted.
Sep 19 05:33:06ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 05:33:06ndm
Core::Authenticator: generating.
Sep 19 05:33:08ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 05:33:10ndm
Core::Authenticator: no such user: "enable".
Sep 19 05:33:12ndm
Core::Authenticator: no such user: "shell".
Sep 19 05:33:14telnetd
188.18.24.32 client disconnected.
Sep 19 05:33:14ndm
Core::Session: client disconnected.
Sep 19 05:33:17telnetd
a new connection from 188.18.24.32 accepted.
Sep 19 05:33:17ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 05:33:17ndm
Core::Authenticator: generating.
Sep 19 05:33:19ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 05:33:22ndm
Core::Authenticator: no such user: "enable".
Sep 19 05:33:24ndm
Core::Authenticator: no such user: "shell".
Sep 19 05:33:26telnetd
188.18.24.32 client disconnected.
Sep 19 05:33:26ndm
Core::Session: client disconnected.
Sep 19 05:33:26telnetd
a new connection from 188.18.24.32 accepted.
Sep 19 05:33:26ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 05:33:26ndm
Core::Authenticator: generating.
Sep 19 05:33:28ndm
Core::Authenticator: generating.
Sep 19 05:33:28ndm
Core::Authenticator: user "admin": invalid password.
Sep 19 05:33:30ndm
Core::Authenticator: no such user: "enable".
Sep 19 05:33:32ndm
Core::Authenticator: no such user: "shell".
Sep 19 05:33:34telnetd
188.18.24.32 client disconnected.
Sep 19 05:33:34ndm
Core::Session: client disconnected.
Sep 19 05:33:34telnetd
a new connection from 188.18.24.32 accepted.
Sep 19 05:33:34ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 05:33:34ndm
Core::Authenticator: generating.
Sep 19 05:33:36ndm
Core::Authenticator: generating.
Sep 19 05:33:36ndm
Core::Authenticator: user "admin": invalid password.
Sep 19 05:33:38ndm
Core::Authenticator: no such user: "enable".
Sep 19 05:33:41ndm
Core::Authenticator: no such user: "shell".
Sep 19 05:33:42telnetd
188.18.24.32 client disconnected.
Sep 19 05:33:42ndm
Core::Session: client disconnected.
Sep 19 05:33:43telnetd
a new connection from 188.18.24.32 accepted.
Sep 19 05:33:43ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 05:33:43ndm
Core::Authenticator: generating.
Sep 19 05:33:45ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 05:33:47ndm
Core::Authenticator: no such user: "enable".
Sep 19 05:33:49ndm
Core::Authenticator: no such user: "shell".
Sep 19 05:33:51telnetd
188.18.24.32 client disconnected.
Sep 19 05:33:51ndm
Core::Session: client disconnected.
Sep 19 05:33:51telnetd
a new connection from 188.18.24.32 accepted.
Sep 19 05:33:51ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 05:33:51ndm
Core::Authenticator: generating.
Sep 19 05:33:53ndm
Core::Authenticator: generating.
Sep 19 05:33:53ndm
Core::Authenticator: user "admin": invalid password.
Sep 19 05:33:56ndm
Core::Authenticator: no such user: "enable".
Sep 19 05:33:58ndm
Core::Authenticator: no such user: "shell".
Sep 19 05:34:00telnetd
188.18.24.32 client disconnected.
Sep 19 05:34:00ndm
Core::Session: client disconnected.
Sep 19 05:34:00telnetd
a new connection from 188.18.24.32 accepted.
Sep 19 05:34:00ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 05:34:00ndm
Core::Authenticator: generating.
Sep 19 05:34:02ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 05:34:04ndm
Core::Authenticator: no such user: "enable".
Sep 19 05:34:06ndm
Core::Authenticator: no such user: "shell".
Sep 19 05:34:08telnetd
188.18.24.32 client disconnected.
Sep 19 05:34:08ndm
Core::Session: client disconnected.
Sep 19 06:17:59telnetd
a new connection from 2.178.184.136 accepted.
Sep 19 06:17:59ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 06:17:59ndm
Core::Authenticator: generating.
Sep 19 06:18:02ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 06:18:04ndm
Core::Authenticator: no such user: "enable".
Sep 19 06:18:07ndm
Core::Authenticator: no such user: "shell".
Sep 19 06:18:09telnetd
2.178.184.136 client disconnected.
Sep 19 06:18:09ndm
Core::Session: client disconnected.
Sep 19 06:18:09telnetd
a new connection from 2.178.184.136 accepted.
Sep 19 06:18:09ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 06:18:09ndm
Core::Authenticator: generating.
Sep 19 06:18:12ndm
Core::Authenticator: generating.
Sep 19 06:18:12ndm
Core::Authenticator: user "admin": invalid password.
Sep 19 06:18:14ndm
Core::Authenticator: no such user: "enable".
Sep 19 06:18:17ndm
Core::Authenticator: no such user: "shell".
Sep 19 06:18:19telnetd
2.178.184.136 client disconnected.
Sep 19 06:18:19ndm
Core::Session: client disconnected.
Sep 19 06:18:19telnetd
a new connection from 2.178.184.136 accepted.
Sep 19 06:18:19ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 06:18:19ndm
Core::Authenticator: generating.
Sep 19 06:18:22ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 06:18:24ndm
Core::Authenticator: no such user: "enable".
Sep 19 06:18:27ndm
Core::Authenticator: no such user: "shell".
Sep 19 06:18:28telnetd
2.178.184.136 client disconnected.
Sep 19 06:18:28ndm
Core::Session: client disconnected.
Sep 19 06:18:29telnetd
a new connection from 2.178.184.136 accepted.
Sep 19 06:18:29ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 06:18:29ndm
Core::Authenticator: generating.
Sep 19 06:18:31ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 06:18:34ndm
Core::Authenticator: no such user: "enable".
Sep 19 06:18:36ndm
Core::Authenticator: no such user: "shell".
Sep 19 06:18:38telnetd
2.178.184.136 client disconnected.
Sep 19 06:18:38ndm
Core::Session: client disconnected.
Sep 19 06:18:39telnetd
a new connection from 2.178.184.136 accepted.
Sep 19 06:18:39ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 06:18:39ndm
Core::Authenticator: generating.
Sep 19 06:18:41ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 06:18:44ndm
Core::Authenticator: no such user: "enable".
Sep 19 06:18:46ndm
Core::Authenticator: no such user: "shell".
Sep 19 06:18:48telnetd
2.178.184.136 client disconnected.
Sep 19 06:18:48ndm
Core::Session: client disconnected.
Sep 19 06:18:49telnetd
a new connection from 2.178.184.136 accepted.
Sep 19 06:18:49ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 06:18:49ndm
Core::Authenticator: generating.
Sep 19 06:18:51ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 06:18:54ndm
Core::Authenticator: no such user: "enable".
Sep 19 06:18:56ndm
Core::Authenticator: no such user: "shell".
Sep 19 06:18:58telnetd
2.178.184.136 client disconnected.
Sep 19 06:18:58ndm
Core::Session: client disconnected.
Sep 19 06:18:58telnetd
a new connection from 2.178.184.136 accepted.
Sep 19 06:18:58ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 06:18:58ndm
Core::Authenticator: generating.
Sep 19 06:19:01ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 06:19:03ndm
Core::Authenticator: no such user: "enable".
Sep 19 06:19:06ndm
Core::Authenticator: no such user: "shell".
Sep 19 06:19:08telnetd
2.178.184.136 client disconnected.
Sep 19 06:19:08ndm
Core::Session: client disconnected.
Sep 19 06:19:08telnetd
a new connection from 2.178.184.136 accepted.
Sep 19 06:19:08ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 06:19:08ndm
Core::Authenticator: generating.
Sep 19 06:19:11ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 06:19:13ndm
Core::Authenticator: no such user: "enable".
Sep 19 06:19:16ndm
Core::Authenticator: no such user: "shell".
Sep 19 06:19:18telnetd
2.178.184.136 client disconnected.
Sep 19 06:19:18ndm
Core::Session: client disconnected.
Sep 19 06:19:18telnetd
a new connection from 2.178.184.136 accepted.
Sep 19 06:19:18ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 06:19:18ndm
Core::Authenticator: generating.
Sep 19 06:19:21ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 06:19:23ndm
Core::Authenticator: no such user: "enable".
Sep 19 06:19:26ndm
Core::Authenticator: no such user: "shell".
Sep 19 06:19:27telnetd
2.178.184.136 client disconnected.
Sep 19 06:19:27ndm
Core::Session: client disconnected.
Sep 19 06:19:28telnetd
a new connection from 2.178.184.136 accepted.
Sep 19 06:19:28ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 06:19:28ndm
Core::Authenticator: generating.
Sep 19 06:19:30ndm
Core::Authenticator: generating.
Sep 19 06:19:33ndm
Core::Authenticator: no such user: "enable".
Sep 19 06:19:35ndm
Core::Authenticator: no such user: "shell".
Sep 19 06:19:37telnetd
2.178.184.136 client disconnected.
Sep 19 06:19:37ndm
Core::Session: client disconnected.
Sep 19 07:14:15telnetd
a new connection from 188.16.61.136 accepted.
Sep 19 07:14:15ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 07:14:15ndm
Core::Authenticator: generating.
Sep 19 07:14:17ndm
Core::Authenticator: no such user: "admin1".
Sep 19 07:14:19ndm
Core::Authenticator: no such user: "enable".
Sep 19 07:14:21ndm
Core::Authenticator: no such user: "shell".
Sep 19 07:14:23telnetd
188.16.61.136 client disconnected.
Sep 19 07:14:23ndm
Core::Session: client disconnected.
Sep 19 07:14:23telnetd
a new connection from 188.16.61.136 accepted.
Sep 19 07:14:23ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 07:14:23ndm
Core::Authenticator: generating.
Sep 19 07:14:25ndm
Core::Authenticator: generating.
Sep 19 07:14:25ndm
Core::Authenticator: user "admin": invalid password.
Sep 19 07:14:27ndm
Core::Authenticator: no such user: "enable".
Sep 19 07:14:29ndm
Core::Authenticator: no such user: "shell".
Sep 19 07:14:31telnetd
188.16.61.136 client disconnected.
Sep 19 07:14:31ndm
Core::Session: client disconnected.
Sep 19 07:14:31telnetd
a new connection from 188.16.61.136 accepted.
Sep 19 07:14:31ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 07:14:31ndm
Core::Authenticator: generating.
Sep 19 07:14:33ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 07:14:35ndm
Core::Authenticator: no such user: "enable".
Sep 19 07:14:37ndm
Core::Authenticator: no such user: "shell".
Sep 19 07:14:39telnetd
188.16.61.136 client disconnected.
Sep 19 07:14:39ndm
Core::Session: client disconnected.
Sep 19 07:14:39telnetd
a new connection from 188.16.61.136 accepted.
Sep 19 07:14:39ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 07:14:39ndm
Core::Authenticator: generating.
Sep 19 07:14:42ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 07:14:44ndm
Core::Authenticator: no such user: "enable".
Sep 19 07:14:46ndm
Core::Authenticator: no such user: "shell".
Sep 19 07:14:47telnetd
188.16.61.136 client disconnected.
Sep 19 07:14:47ndm
Core::Session: client disconnected.
Sep 19 07:14:48telnetd
a new connection from 188.16.61.136 accepted.
Sep 19 07:14:48ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 07:14:48ndm
Core::Authenticator: generating.
Sep 19 07:14:50ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 07:14:52ndm
Core::Authenticator: no such user: "enable".
Sep 19 07:14:54ndm
Core::Authenticator: no such user: "shell".
Sep 19 07:14:56telnetd
188.16.61.136 client disconnected.
Sep 19 07:14:56ndm
Core::Session: client disconnected.
Sep 19 07:14:56telnetd
a new connection from 188.16.61.136 accepted.
Sep 19 07:14:56ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 07:14:56ndm
Core::Authenticator: generating.
Sep 19 07:14:58ndm
Core::Authenticator: generating.
Sep 19 07:14:58ndm
Core::Authenticator: user "admin": invalid password.
Sep 19 07:15:00ndm
Core::Authenticator: no such user: "enable".
Sep 19 07:15:02ndm
Core::Authenticator: no such user: "shell".
Sep 19 07:15:04telnetd
188.16.61.136 client disconnected.
Sep 19 07:15:04ndm
Core::Session: client disconnected.
Sep 19 07:15:04telnetd
a new connection from 188.16.61.136 accepted.
Sep 19 07:15:04ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 07:15:04ndm
Core::Authenticator: generating.
Sep 19 07:15:06ndm
Core::Authenticator: no such user: "service".
Sep 19 07:15:08ndm
Core::Authenticator: no such user: "enable".
Sep 19 07:15:10ndm
Core::Authenticator: no such user: "shell".
Sep 19 07:15:12telnetd
188.16.61.136 client disconnected.
Sep 19 07:15:12ndm
Core::Session: client disconnected.
Sep 19 08:29:41telnetd
a new connection from 188.17.35.250 accepted.
Sep 19 08:29:41ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 08:29:41ndm
Core::Authenticator: generating.
Sep 19 08:29:48ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 08:30:19ndm
Core::Authenticator: no such user: "enable".
Sep 19 08:31:53telnetd
188.17.35.250 client disconnected.
Sep 19 08:31:53ndm
Core::Session: client disconnected.
Sep 19 08:38:43telnetd
a new connection from 188.19.217.22 accepted.
Sep 19 08:38:43ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 08:38:43ndm
Core::Authenticator: generating.
Sep 19 08:38:45ndm
Core::Authenticator: generating.
Sep 19 08:38:45ndm
Core::Authenticator: user "admin": invalid password.
Sep 19 08:38:47ndm
Core::Authenticator: no such user: "enable".
Sep 19 08:38:49ndm
Core::Authenticator: no such user: "shell".
Sep 19 08:38:51telnetd
188.19.217.22 client disconnected.
Sep 19 08:38:51ndm
Core::Session: client disconnected.
Sep 19 08:38:51telnetd
a new connection from 188.19.217.22 accepted.
Sep 19 08:38:51ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 08:38:51ndm
Core::Authenticator: generating.
Sep 19 08:38:53ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 08:38:56ndm
Core::Authenticator: no such user: "enable".
Sep 19 08:38:58ndm
Core::Authenticator: no such user: "shell".
Sep 19 08:39:00telnetd
188.19.217.22 client disconnected.
Sep 19 08:39:00ndm
Core::Session: client disconnected.
Sep 19 08:39:00telnetd
a new connection from 188.19.217.22 accepted.
Sep 19 08:39:00ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 08:39:00ndm
Core::Authenticator: generating.
Sep 19 08:39:02ndm
Core::Authenticator: no such user: "service".
Sep 19 08:39:04ndm
Core::Authenticator: no such user: "enable".
Sep 19 08:39:06ndm
Core::Authenticator: no such user: "shell".
Sep 19 08:39:08telnetd
188.19.217.22 client disconnected.
Sep 19 08:39:08ndm
Core::Session: client disconnected.
Sep 19 08:39:08telnetd
a new connection from 188.19.217.22 accepted.
Sep 19 08:39:08ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 08:39:08ndm
Core::Authenticator: generating.
Sep 19 08:39:10ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 08:39:12ndm
Core::Authenticator: no such user: "enable".
Sep 19 08:39:15ndm
Core::Authenticator: no such user: "shell".
Sep 19 08:39:17telnetd
188.19.217.22 client disconnected.
Sep 19 08:39:17ndm
Core::Session: client disconnected.
Sep 19 08:39:17telnetd
a new connection from 188.19.217.22 accepted.
Sep 19 08:39:17ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 08:39:17ndm
Core::Authenticator: generating.
Sep 19 08:39:19ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 08:39:21ndm
Core::Authenticator: no such user: "enable".
Sep 19 08:39:23ndm
Core::Authenticator: no such user: "shell".
Sep 19 08:39:25telnetd
188.19.217.22 client disconnected.
Sep 19 08:39:25ndm
Core::Session: client disconnected.
Sep 19 08:39:25telnetd
a new connection from 188.19.217.22 accepted.
Sep 19 08:39:25ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 08:39:25ndm
Core::Authenticator: generating.
Sep 19 08:39:27ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 08:39:29ndm
Core::Authenticator: no such user: "enable".
Sep 19 08:39:32ndm
Core::Authenticator: no such user: "shell".
Sep 19 08:39:33telnetd
188.19.217.22 client disconnected.
Sep 19 08:39:33ndm
Core::Session: client disconnected.
Sep 19 08:39:34telnetd
a new connection from 188.19.217.22 accepted.
Sep 19 08:39:34ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 08:39:34ndm
Core::Authenticator: generating.
Sep 19 08:39:36ndm
Core::Authenticator: generating.
Sep 19 08:39:36ndm
Core::Authenticator: user "admin": invalid password.
Sep 19 08:39:38ndm
Core::Authenticator: no such user: "enable".
Sep 19 08:39:40ndm
Core::Authenticator: no such user: "shell".
Sep 19 08:39:42telnetd
188.19.217.22 client disconnected.
Sep 19 08:39:42ndm
Core::Session: client disconnected.
Sep 19 08:39:42telnetd
a new connection from 188.19.217.22 accepted.
Sep 19 08:39:42ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 08:39:42ndm
Core::Authenticator: generating.
Sep 19 08:39:44ndm
Core::Authenticator: generating.
Sep 19 08:39:44ndm
Core::Authenticator: user "admin": invalid password.
Sep 19 08:39:46ndm
Core::Authenticator: no such user: "enable".
Sep 19 08:39:48ndm
Core::Authenticator: no such user: "shell".
Sep 19 08:39:50telnetd
188.19.217.22 client disconnected.
Sep 19 08:39:50ndm
Core::Session: client disconnected.
Sep 19 08:39:50telnetd
a new connection from 188.19.217.22 accepted.
Sep 19 08:39:50ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 08:39:50ndm
Core::Authenticator: generating.
Sep 19 08:39:53ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 08:39:55ndm
Core::Authenticator: no such user: "enable".
Sep 19 08:39:57ndm
Core::Authenticator: no such user: "shell".
Sep 19 08:39:59telnetd
188.19.217.22 client disconnected.
Sep 19 08:39:59ndm
Core::Session: client disconnected.
Sep 19 08:39:59telnetd
a new connection from 188.19.217.22 accepted.
Sep 19 08:39:59ndm
Core::Server: started Session 127.0.0.1:0.
Sep 19 08:39:59ndm
Core::Authenticator: generating.
Sep 19 08:40:01ndm
Core::Authenticator: access to "cli" denied for user "root".
Sep 19 08:40:03ndm
Core::Authenticator: no such user: "enable".
Sep 19 08:40:05ndm
Core::Authenticator: no such user: "shell".
Sep 19 08:40:07telnetd
188.19.217.22 client disconnected.
Sep 19 08:40:07ndm
Core::Session: client disconnected.
Edited by SSAVbrLink to comment
Share on other sites
32 answers to this question
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.