Community discussions

MikroTik App
 
singh
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 72
Joined: Sat Apr 04, 2009 11:57 am

Suspected hacking

Tue May 12, 2009 10:33 pm

Hi,
I get the following on my Microtik router os.
Looks like someone is trying to log into my system.
Is there a way of blocking the IP thats trying to access or any better solution.
Thanks


echo: system,error,critical login failure for user ftp from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user test from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user root from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user admin from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user guest from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user master from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user apache from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user root from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user root from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user root from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user root from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user root from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user admin from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user admin from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user admin from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user admin from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user root from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user root from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user test from 67.225.209.238 via ssh
[admin@Sumo] >
echo: system,error,critical login failure for user test from 67.225.209.238 via ssh
 
changeip
Forum Guru
Forum Guru
Posts: 3806
Joined: Fri May 28, 2004 5:22 pm

Re: Suspected hacking

Tue May 12, 2009 11:40 pm

the best solution is to change your ssh port from 22 to something else.
Colo and Wholesale Bandwidth Available! Sales at SanDiegoBroadband dot com
 
User avatar
sioannou
Member Candidate
Member Candidate
Posts: 121
Joined: Tue Apr 29, 2008 3:14 pm

Re: Suspected hacking

Wed May 13, 2009 12:08 am

the best solution is to use the security scripts on the wiki.
http://wiki.mikrotik.com/wiki/Bruteforc ... P_%26_SSH)
http://wiki.mikrotik.com/wiki/Firewall

There are a lot of mentions of this in the forum.
01010011011011110111010001101001011100100110100101110011

Who is online

Users browsing this forum: No registered users and 80 guests