首页>经验心得>Bad password attempt for 'root' from路由器被远程SSH攻击解决方法
2019
05-25

Bad password attempt for 'root' from路由器被远程SSH攻击解决方法

路由器刷机交流Q群

Bad password attempt for 'root' from路由器被远程SSH攻击解决方法

无意中进路由看了一下日志,竟然发现被人用穷举法破解秘密
我的openwrt是默认密码,所幸的没有破解成功对方就放弃了,改密码以后自己登陆也麻烦,于是firewall里面忽略所有来自外网的数据

Aug 27 19:08:59 OpenWrt authpriv.warn dropbear[1399]: Bad password attempt for 'root' from 219.136.246.22:35674
Aug 27 19:09:00 OpenWrt authpriv.info dropbear[1399]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:00 OpenWrt authpriv.info dropbear[1400]: Child connection from 219.136.246.22:36329
Aug 27 19:09:01 OpenWrt authpriv.warn dropbear[1400]: Bad password attempt for 'root' from 219.136.246.22:36329
Aug 27 19:09:01 OpenWrt authpriv.info dropbear[1400]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:01 OpenWrt authpriv.info dropbear[1401]: Child connection from 219.136.246.22:36981
Aug 27 19:09:03 OpenWrt authpriv.warn dropbear[1401]: Bad password attempt for 'root' from 219.136.246.22:36981
Aug 27 19:09:03 OpenWrt authpriv.info dropbear[1401]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:03 OpenWrt authpriv.info dropbear[1402]: Child connection from 219.136.246.22:37627
Aug 27 19:09:04 OpenWrt authpriv.warn dropbear[1402]: Bad password attempt for 'root' from 219.136.246.22:37627
Aug 27 19:09:05 OpenWrt authpriv.info dropbear[1402]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:05 OpenWrt authpriv.info dropbear[1403]: Child connection from 219.136.246.22:38220
Aug 27 19:09:06 OpenWrt authpriv.warn dropbear[1403]: Bad password attempt for 'root' from 219.136.246.22:38220
Aug 27 19:09:07 OpenWrt authpriv.info dropbear[1403]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:10 OpenWrt authpriv.info dropbear[1404]: Child connection from 219.136.246.22:38821
Aug 27 19:09:11 OpenWrt authpriv.warn dropbear[1404]: Bad password attempt for 'root' from 219.136.246.22:38821
Aug 27 19:09:11 OpenWrt authpriv.info dropbear[1404]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:11 OpenWrt authpriv.info dropbear[1405]: Child connection from 219.136.246.22:40402
Aug 27 19:09:13 OpenWrt authpriv.warn dropbear[1405]: Bad password attempt for 'root' from 219.136.246.22:40402
Aug 27 19:09:13 OpenWrt authpriv.info dropbear[1405]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:13 OpenWrt authpriv.info dropbear[1406]: Child connection from 219.136.246.22:40978
Aug 27 19:09:14 OpenWrt authpriv.warn dropbear[1406]: Bad password attempt for 'root' from 219.136.246.22:40978
Aug 27 19:09:15 OpenWrt authpriv.info dropbear[1406]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:15 OpenWrt authpriv.info dropbear[1407]: Child connection from 219.136.246.22:41595
Aug 27 19:09:16 OpenWrt authpriv.warn dropbear[1407]: Bad password attempt for 'root' from 219.136.246.22:41595
Aug 27 19:09:17 OpenWrt authpriv.info dropbear[1407]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:17 OpenWrt authpriv.info dropbear[1408]: Child connection from 219.136.246.22:42308
Aug 27 19:09:18 OpenWrt authpriv.warn dropbear[1408]: Bad password attempt for 'root' from 219.136.246.22:42308
Aug 27 19:09:19 OpenWrt authpriv.info dropbear[1408]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:19 OpenWrt authpriv.info dropbear[1409]: Child connection from 219.136.246.22:42891
Aug 27 19:09:20 OpenWrt authpriv.warn dropbear[1409]: Bad password attempt for 'root' from 219.136.246.22:42891
Aug 27 19:09:20 OpenWrt authpriv.info dropbear[1409]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:20 OpenWrt authpriv.info dropbear[1410]: Child connection from 219.136.246.22:43483
Aug 27 19:09:22 OpenWrt authpriv.warn dropbear[1410]: Bad password attempt for 'root' from 219.136.246.22:43483
Aug 27 19:09:22 OpenWrt authpriv.info dropbear[1410]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:22 OpenWrt authpriv.info dropbear[1411]: Child connection from 219.136.246.22:44032
Aug 27 19:09:24 OpenWrt authpriv.warn dropbear[1411]: Bad password attempt for 'root' from 219.136.246.22:44032
Aug 27 19:09:24 OpenWrt authpriv.info dropbear[1411]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:24 OpenWrt authpriv.info dropbear[1412]: Child connection from 219.136.246.22:44702
Aug 27 19:09:25 OpenWrt authpriv.warn dropbear[1412]: Bad password attempt for 'root' from 219.136.246.22:44702
Aug 27 19:09:26 OpenWrt authpriv.info dropbear[1412]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:26 OpenWrt authpriv.info dropbear[1413]: Child connection from 219.136.246.22:45264
Aug 27 19:09:27 OpenWrt authpriv.warn dropbear[1413]: Bad password attempt for 'root' from 219.136.246.22:45264
Aug 27 19:09:27 OpenWrt authpriv.info dropbear[1413]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:28 OpenWrt authpriv.info dropbear[1414]: Child connection from 219.136.246.22:45833
Aug 27 19:09:29 OpenWrt authpriv.warn dropbear[1414]: Bad password attempt for 'root' from 219.136.246.22:45833
Aug 27 19:09:30 OpenWrt authpriv.info dropbear[1414]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:30 OpenWrt authpriv.info dropbear[1415]: Child connection from 219.136.246.22:46564
Aug 27 19:09:31 OpenWrt authpriv.warn dropbear[1415]: Bad password attempt for 'root' from 219.136.246.22:46564
Aug 27 19:09:31 OpenWrt authpriv.info dropbear[1415]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:31 OpenWrt authpriv.info dropbear[1416]: Child connection from 219.136.246.22:47117
Aug 27 19:09:33 OpenWrt authpriv.warn dropbear[1416]: Bad password attempt for 'root' from 219.136.246.22:47117
Aug 27 19:09:33 OpenWrt authpriv.info dropbear[1416]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:33 OpenWrt authpriv.info dropbear[1417]: Child connection from 219.136.246.22:47636
Aug 27 19:09:35 OpenWrt authpriv.warn dropbear[1417]: Bad password attempt for 'root' from 219.136.246.22:47636
Aug 27 19:09:35 OpenWrt authpriv.info dropbear[1417]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:35 OpenWrt authpriv.info dropbear[1418]: Child connection from 219.136.246.22:48264
Aug 27 19:09:37 OpenWrt authpriv.warn dropbear[1418]: Bad password attempt for 'root' from 219.136.246.22:48264
Aug 27 19:09:37 OpenWrt authpriv.info dropbear[1418]: Exit before auth (user 'root', 1 fails): Disconnect received
Aug 27 19:09:37 OpenWrt authpriv.info dropbear[1419]: Child connection from 219.136.246.22:48914
Aug 27 19:09:38 OpenWrt authpriv.warn dropbear[1419]: Bad password attempt for 'root' from 219.136.246.22:48914
Aug 27 19:09:39 OpenWrt authpriv.info dropbear[1419]: Exit before auth (user 'root', 1 fails): Disconnect received

OpenWRT固件拒绝SSH/Luci密码破解攻击脚本 OpenWRT被SSH攻击怎么办?

免费支持本站

支付宝打赏支付宝打赏微信打赏微信打赏

本文》有 0 条评论

留下一个回复 (您的评论需要经过审核才能显示)