Community discussions

 
usmans
Member Candidate
Member Candidate
Topic Author
Posts: 105
Joined: Sun Aug 29, 2010 11:54 pm

mikrotik attack?

Mon Jan 17, 2011 10:57 pm

i open a new terminal. i see a list of critical login failures.
is this some kind of attack? see below
jan/17/2011 08:27:51 system,error,critical login failure for user root from 140.52.115.30 via ssh
jan/17/2011 08:27:55 system,error,critical login failure for user root from 140.52.115.30 via ssh
jan/17/2011 08:28:00 system,error,critical login failure for user root from 140.52.115.30 via ssh
jan/17/2011 08:28:03 system,error,critical login failure for user root from 140.52.115.30 via ssh
jan/17/2011 08:28:12 system,error,critical login failure for user root from 140.52.115.30 via ssh
jan/17/2011 08:28:17 system,error,critical login failure for user root from 140.52.115.30 via ssh
jan/17/2011 08:28:20 system,error,critical login failure for user oracle from 140.52.115.30 via ssh
jan/17/2011 08:28:24 system,error,critical login failure for user test from 140.52.115.30 via ssh
 
User avatar
martini
Member Candidate
Member Candidate
Posts: 296
Joined: Tue Dec 21, 2004 12:13 am

Re: mikrotik attack?

Mon Jan 17, 2011 11:18 pm

ssh bruteforce attack, close ssh port or use firewall or change port number
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24264
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: mikrotik attack?

Tue Jan 18, 2011 8:06 am

This is a good solution against this attack:
http://wiki.mikrotik.com/wiki/Bruteforc ... prevention
No answer to your question? How to write posts
 
usmans
Member Candidate
Member Candidate
Topic Author
Posts: 105
Joined: Sun Aug 29, 2010 11:54 pm

Re: mikrotik attack?

Tue Jan 18, 2011 9:44 am

ssh bruteforce attack, close ssh port or use firewall or change port number
thanks..............
This is a good solution against this attack:
http://wiki.mikrotik.com/wiki/Bruteforc ... prevention
thanks...normis

Who is online

Users browsing this forum: belits17 and 100 guests