这个狗日的在通过啥方式爆我路由器的

我日人

Sat Apr 11 18:38:38 2020 authpriv.info dropbear[10214]: Exit before auth (user 'root', 1 fails): Exited normally
Sat Apr 11 18:38:38 2020 authpriv.warn dropbear[10221]: Bad password attempt for 'root' from 125.72.15.232:6124
Sat Apr 11 18:38:39 2020 authpriv.info dropbear[10221]: Exit before auth (user 'root', 1 fails): Exited normally
Sat Apr 11 18:38:39 2020 authpriv.info dropbear[10224]: Child connection from 125.72.15.232:6125
Sat Apr 11 18:38:39 2020 authpriv.warn dropbear[10224]: Bad password attempt for 'root' from 125.72.15.232:6125
Sat Apr 11 18:38:39 2020 authpriv.info dropbear[10224]: Exit before auth (user 'root', 1 fails): Exited normally
Sat Apr 11 18:38:39 2020 authpriv.info dropbear[10225]: Child connection from 125.72.15.232:6126
Sat Apr 11 18:38:40 2020 authpriv.warn dropbear[10225]: Bad password attempt for 'root' from 125.72.15.232:6126
Sat Apr 11 18:38:40 2020 authpriv.info dropbear[10225]: Exit before auth (user 'root', 1 fails): Exited normally
Sat Apr 11 18:38:40 2020 authpriv.info dropbear[10227]: Child connection from 125.72.15.232:6127
Sat Apr 11 18:38:40 2020 authpriv.warn dropbear[10227]: Bad password attempt for 'root' from 125.72.15.232:6127
Sat Apr 11 18:38:41 2020 authpriv.info dropbear[10230]: Child connection from 125.72.15.232:6128
Sat Apr 11 18:38:41 2020 authpriv.info dropbear[10227]: Exit before auth (user 'root', 1 fails): Exited normally
Sat Apr 11 18:38:41 2020 authpriv.warn dropbear[10230]: Bad password attempt for 'root' from 125.72.15.232:6128
Sat Apr 11 18:38:41 2020 authpriv.info dropbear[10230]: Exit before auth (user 'root', 1 fails): Exited normally
Sat Apr 11 18:38:50 2020 daemon.warn dnsmasq[23516]: possible DNS-rebind attack detected: isp-map.xunyou.mobi

N1旁路由

一个不知名网友

我看不懂日志这个东西

alhlpha

是不是你那个应用的云端服务啊

我日人

"

先关了SSH再看看。看IP这孙子是家庭宽带

ico

批量爆路由器，然后做矿机或改你DNS劫持你数据。

yunlikanwu

我也是N1，怕怕

英雄大人

不开远程访问不行吗

我日人

"

N1开了V2服务端，且是非军事区，开了DDNS方便连接。但没留意22端口开着

我日人

"

删除Dropbear 实例