livewireless
join:2006-11-03
La Jolla, CA
| Log from RouterOS
Hackers IP |
I've got some filters and can probably get one going for this.
Just thought I'd post this to get this IP known. |
|
gunther_01
Premium
join:2004-03-29
Saybrook, IL
| You will be fighting logs like that for a while until you lock those ports down or place something automatic in there to block the attempts.
It's un-avoidable... Prob just some scanner program/hack/virus etc.. going about it's daily grind  |
|
Inssomniak
Premium
join:2005-04-06
Cayuga, ON
| reply to livewireless
you can add ssh/ftp rules into your firewall that automatically blacklist 3 unsuccessful attempts to login.
ftp is the same, just change the port and address list name |
|
livewireless
join:2006-11-03
La Jolla, CA
1 edit | Thanks gunther-01, Inssomniak  |
|
tx_tower
join:2007-11-13
Blanco, TX | reply to livewireless
we usually see these start within 12-24 hours of the device being connected.
once you set up the blacklist script you should be fine, like gunther mentioned its not a specific concentrated attack just a script running on some box. |
|
livewireless
join:2006-11-03
La Jolla, CA | Interesting. Yeah, I hadn't yet pulled the Shotgun out of the closet. Didn't really think it was harmfull. I'd just like to get a hold of these goons for exercise. |
|
viperm
Carpe Diem
Premium
join:2002-07-09
Winchester, CA
| reply to livewireless
in winbox go into IP/services and turn off FTP. SSH etc and that wont happen. Now if you need FTP or SSH access to you mikrotik just use NON standard ports..
We see this all the time we dont turn on FTP or SSH at all and if we do we do it only for as long as we need it open..
--
ComTrain Certified Tower Climber. American Tower Certified approved contractor. Wireless consultants. |
|
Inssomniak
Premium
join:2005-04-06
Cayuga, ON
| said by viperm  :in winbox go into IP/services and turn off FTP. SSH etc and that wont happen. Now if you need FTP or SSH access to you mikrotik just use NON standard ports.. We see this all the time we dont turn on FTP or SSH at all and if we do we do it only for as long as we need it open.. Ya this a good option, I only turn on FTP when I need it. |
|
slipstream1
Premium
join:2005-11-15
Jacksonville, TX | reply to livewireless
On my RouterOS installs, I turn off ssh and ftp, because I don't generally need those services. |
|
livewireless
join:2006-11-03
La Jolla, CA
| So In my case the solution would be to change ports.
I have a camera on motion detection sending images via ftp to the RouterOS H-drive. I'm trying to pack as much as I can on that box. The location is Tiny. Small knik-nack tourist shop probably 15 ft x 20 ft. So as one can imagine, one needs to conserve space. |
|
gunther_01
Premium
join:2004-03-29
Saybrook, IL | you could just deny FTP from everyone but your camera. |
|
