Adesso che non ci sono più i 2ms ? Che scuse invento?

PF-Matteo

@Cla.78 non diamo dettagli perché siamo nel mezzo dei lavori. Purtroppo i Ddos, che stanno continuando, stanno rallentando il tutto, ma si va comunque avanti.

Stiamo concentrando gli sforzi per ridurre al minimo il loro impatto e credo che, allo stato attuale, abbiamo ottenuto un ottimo risultato, Comun l'improvement sta continuando

DI00AA

PF-Matteo

Ma sono in gruppo le persone dietro questi DDoS ?
Non può essere una sola persona che vi perseguita.

A meno che non abbiate fatto qualche torto al John wick delle reti XD.

Anche proprio per la costanza.
Se avete il nome di chi è stato potete farcelo capire per vie traverse ?
Così magari ci mettiamo in 10 /20 clienti e lo stolkeriamo sui social.
XD poi vedi che così facendo la smettono subito.

Inkubo

PF-Matteo
Effettivamente non si notano più le continue disconnessioni , per quello che percepisco come utente la linea è perfetta.
Indice che il lavoro svolto sta dando i suoi frutti.

P.s. Per la cronaca anche con 2ms in meno faccio schifo ... mi devo rassegnare non è colpa della linea

Cla.78

PF-Matteo Attendiamo fiduciosi, come già detto, la fine dei lavori, per ora sto registrando aumenti di 5 ms dopo il trasporto, e non più 2 ms... attendiamo. 😅

RobertoMattioli

DI00AA Anche proprio per la costanza.
Se avete il nome di chi è stato potete farcelo capire per vie traverse ?
Così magari ci mettiamo in 10 /20 clienti e lo stolkeriamo sui social.
XD poi vedi che così facendo la smettono subito.

Ma neanche pensarle queste cose...

PF-Matteo

Ci sono verifiche in corso. In media sono dai 3 ai 5 attacchi al giorno, quindi la motivazione deve essere tanta 😅

GiaNN

PF-Matteo ho di recente installato e impostato snort sul firewall, spesso vedo botte di (http_inspect) PROTOCOL-OTHER HTTP server response before client request e di (http_inspect) NO CONTENT-LENGTH OR TRANSFER-ENCODING IN HTTP RESPONSE e (http_inspect) INVALID CHUNK SIZE OR CHUNK SIZE FOLLOWED BY JUNK CHARACTERS oltre che prove di accesso e caricamento dati a vari SQL, dici che sono ancora segni di DDoS o falsi allarmi / come funziona internet?

DI00AA

RobertoMattioli

Fidati...poi smette tutto in tempo zero.

[cancellato]

GiaNN sono bot non per forza DDoS. Se vuoi vedere i log bombardati apri la porta 22 su internet (se sai cosa stai facendo per evitare che ti buchino) e logga e vedi cosa ti accade...

[cancellato]

GiaNN come funziona internet?

be diciamo che non è come i padri fondatori la pensavano.

MN00AA

GiaNN sono cose "normali", le vedi con qualunque IP pubblico che apre porte su internet, residenziale o datacenter che sia

uiblog.it "pi" viene testato sempre come utente ssh perche' la password di default per molti anni e' stata "raspberry"...

[cancellato]

@PF-Matteo se non è un'informazione riservata.. l'anti DDoS che usate ora è lo stesso del gruppo e dato che immagino Aruba osservi questi attacchi abbastanza spesso, come vi aiuta/come sono attrezzati?

GiaNN

[cancellato] lo so, tempo fa avevo un server ubuntu con la porta 22 aperta e la quantità di bot che provavano a loggarsi era enorme. Provano tutti con root, admin o pi (avevo il pihole su quella macchina).
Se lo ritrovo lo inoltro

Jul  7 09:11:16 server_nas sshd[4441]: Failed password for invalid user system from 212.0.135.78 port 56785 ssh2
Jul  7 14:06:12 server_nas sshd[6417]: Failed password for invalid user admin from 193.32.163.182 port 39786 ssh2
Jul  7 19:33:50 server_nas sshd[2225]: Failed password for root from 49.69.84.124 port 35176 ssh2
Jul  7 19:33:52 server_nas sshd[2225]: Failed password for root from 49.69.84.124 port 35176 ssh2
Jul  7 19:34:02 server_nas sshd[2225]: message repeated 4 times: [ Failed password for root from 49.69.84.124 port 35176 ssh2]
Jul  7 20:44:02 server_nas sshd[2770]: Failed password for root from 218.92.0.143 port 12689 ssh2
Jul  7 20:44:17 server_nas sshd[2770]: message repeated 5 times: [ Failed password for root from 218.92.0.143 port 12689 ssh2]
Jul  7 20:44:25 server_nas sshd[2774]: Failed password for root from 218.92.0.143 port 20384 ssh2
Jul  7 20:44:39 server_nas sshd[2774]: message repeated 5 times: [ Failed password for root from 218.92.0.143 port 20384 ssh2]
Jul  7 20:44:45 server_nas sshd[2776]: Failed password for root from 218.92.0.143 port 24586 ssh2
Jul  7 20:44:59 server_nas sshd[2776]: message repeated 5 times: [ Failed password for root from 218.92.0.143 port 24586 ssh2]
Jul  7 20:45:05 server_nas sshd[2784]: Failed password for root from 218.92.0.143 port 27544 ssh2
Jul  7 20:45:15 server_nas sshd[2784]: message repeated 3 times: [ Failed password for root from 218.92.0.143 port 27544 ssh2]
Jul  7 20:45:17 server_nas sshd[2784]: Failed password for root from 218.92.0.143 port 27544 ssh2
Jul  7 20:45:20 server_nas sshd[2784]: Failed password for root from 218.92.0.143 port 27544 ssh2
Jul  7 20:45:26 server_nas sshd[2786]: Failed password for root from 218.92.0.143 port 30419 ssh2
Jul  7 20:45:41 server_nas sshd[2786]: message repeated 5 times: [ Failed password for root from 218.92.0.143 port 30419 ssh2]
Jul  7 20:45:47 server_nas sshd[2788]: Failed password for root from 218.92.0.143 port 33188 ssh2
Jul  7 20:46:00 server_nas sshd[2788]: message repeated 5 times: [ Failed password for root from 218.92.0.143 port 33188 ssh2]
Jul  7 20:46:07 server_nas sshd[2796]: Failed password for root from 218.92.0.143 port 35925 ssh2
Jul  7 20:46:20 server_nas sshd[2796]: message repeated 5 times: [ Failed password for root from 218.92.0.143 port 35925 ssh2]
Jul  7 20:46:27 server_nas sshd[2798]: Failed password for root from 218.92.0.143 port 38858 ssh2
Jul  7 20:46:41 server_nas sshd[2798]: message repeated 5 times: [ Failed password for root from 218.92.0.143 port 38858 ssh2]
Jul  7 20:46:48 server_nas sshd[2800]: Failed password for root from 218.92.0.143 port 41828 ssh2
Jul  7 20:47:02 server_nas sshd[2800]: message repeated 5 times: [ Failed password for root from 218.92.0.143 port 41828 ssh2]
Jul  7 20:47:08 server_nas sshd[2802]: Failed password for root from 218.92.0.143 port 44891 ssh2
Jul  7 20:47:22 server_nas sshd[2802]: message repeated 5 times: [ Failed password for root from 218.92.0.143 port 44891 ssh2]
Jul  7 20:47:29 server_nas sshd[2804]: Failed password for root from 218.92.0.143 port 47771 ssh2
Jul  7 20:47:44 server_nas sshd[2804]: message repeated 5 times: [ Failed password for root from 218.92.0.143 port 47771 ssh2]
Jul  7 20:47:51 server_nas sshd[2806]: Failed password for root from 218.92.0.143 port 50693 ssh2
Jul  7 20:48:05 server_nas sshd[2806]: message repeated 5 times: [ Failed password for root from 218.92.0.143 port 50693 ssh2]
Jul  7 21:03:58 server_nas sshd[2888]: Failed password for invalid user pi from 197.227.101.248 port 31822 ssh2
Jul  7 21:03:58 server_nas sshd[2890]: Failed password for invalid user pi from 197.227.101.248 port 31824 ssh2
Jul  7 22:01:50 server_nas sshd[3662]: Failed password for invalid user pi from 186.2.183.101 port 59590 ssh2
Jul  7 22:01:50 server_nas sshd[3665]: Failed password for invalid user pi from 186.2.183.101 port 59594 ssh2
Jul  7 23:00:20 server_nas sshd[4075]: Failed password for invalid user admin from 193.32.163.182 port 34942 ssh2
Jul  8 06:20:25 server_nas sshd[2320]: Failed password for invalid user admin from 193.32.163.182 port 49536 ssh2
Jul  8 10:33:55 server_nas sshd[4757]: Failed password for invalid user admin from 216.80.110.215 port 59948 ssh2
Jul  8 10:33:57 server_nas sshd[4757]: Failed password for invalid user admin from 216.80.110.215 port 59948 ssh2
Jul  8 10:33:59 server_nas sshd[4757]: Failed password for invalid user admin from 216.80.110.215 port 59948 ssh2
Jul  8 10:34:02 server_nas sshd[4757]: Failed password for invalid user admin from 216.80.110.215 port 59948 ssh2
Jul  8 10:34:04 server_nas sshd[4757]: Failed password for invalid user admin from 216.80.110.215 port 59948 ssh2
Jul  8 10:34:06 server_nas sshd[4757]: Failed password for invalid user admin from 216.80.110.215 port 59948 ssh2
Jul  8 11:07:17 server_nas sshd[4989]: Failed password for root from 218.92.0.139 port 9248 ssh2
Jul  8 11:07:32 server_nas sshd[4989]: message repeated 5 times: [ Failed password for root from 218.92.0.139 port 9248 ssh2]
Jul  8 11:07:40 server_nas sshd[4991]: Failed password for root from 218.92.0.139 port 14399 ssh2
Jul  8 11:07:57 server_nas sshd[4991]: message repeated 5 times: [ Failed password for root from 218.92.0.139 port 14399 ssh2]
Jul  8 11:08:07 server_nas sshd[4993]: Failed password for root from 218.92.0.139 port 18095 ssh2
Jul  8 11:08:23 server_nas sshd[4993]: message repeated 5 times: [ Failed password for root from 218.92.0.139 port 18095 ssh2]
Jul  8 11:08:31 server_nas sshd[4997]: Failed password for root from 218.92.0.139 port 24520 ssh2
Jul  8 11:08:46 server_nas sshd[4997]: message repeated 5 times: [ Failed password for root from 218.92.0.139 port 24520 ssh2]
Jul  8 11:08:53 server_nas sshd[4999]: Failed password for root from 218.92.0.139 port 28952 ssh2
Jul  8 11:08:59 server_nas sshd[4999]: message repeated 2 times: [ Failed password for root from 218.92.0.139 port 28952 ssh2]
Jul  8 11:09:03 server_nas sshd[4999]: Failed password for root from 218.92.0.139 port 28952 ssh2
Jul  8 11:09:06 server_nas sshd[4999]: Failed password for root from 218.92.0.139 port 28952 ssh2
Jul  8 11:09:09 server_nas sshd[4999]: Failed password for root from 218.92.0.139 port 28952 ssh2
Jul  8 11:09:18 server_nas sshd[5058]: Failed password for root from 218.92.0.139 port 33385 ssh2
Jul  8 11:09:33 server_nas sshd[5058]: message repeated 5 times: [ Failed password for root from 218.92.0.139 port 33385 ssh2]
Jul  8 11:09:39 server_nas sshd[5060]: Failed password for root from 218.92.0.139 port 38132 ssh2
Jul  8 11:09:50 server_nas sshd[5060]: message repeated 4 times: [ Failed password for root from 218.92.0.139 port 38132 ssh2]
Jul  8 11:09:53 server_nas sshd[5060]: Failed password for root from 218.92.0.139 port 38132 ssh2
Jul  8 11:10:09 server_nas sshd[5095]: Failed password for root from 218.92.0.139 port 43799 ssh2
Jul  8 11:10:18 server_nas sshd[5095]: message repeated 3 times: [ Failed password for root from 218.92.0.139 port 43799 ssh2]
Jul  8 11:10:21 server_nas sshd[5095]: Failed password for root from 218.92.0.139 port 43799 ssh2
Jul  8 11:10:23 server_nas sshd[5095]: Failed password for root from 218.92.0.139 port 43799 ssh2
Jul  8 13:37:50 server_nas sshd[6038]: Failed password for invalid user admin from 193.32.163.182 port 35092 ssh2
Jul  8 14:57:59 server_nas sshd[6941]: Failed password for root from 180.126.53.135 port 59952 ssh2
Jul  8 14:58:12 server_nas sshd[6941]: message repeated 5 times: [ Failed password for root from 180.126.53.135 port 59952 ssh2]
Jul  8 14:58:18 server_nas sshd[6943]: Failed password for root from 180.126.53.135 port 59954 ssh2
Jul  8 14:58:30 server_nas sshd[6943]: message repeated 5 times: [ Failed password for root from 180.126.53.135 port 59954 ssh2]
Jul  8 20:49:04 server_nas sshd[9431]: Failed password for invalid user admin from 193.32.163.182 port 52012 ssh2
Jul  8 22:44:58 server_nas sshd[10274]: Failed password for invalid user admin from 193.32.163.182 port 55958 ssh2
Jul  9 09:58:59 server_nas sshd[17988]: Failed password for invalid user admin from 193.32.163.182 port 37620 ssh2
Jul  9 10:58:09 server_nas sshd[18412]: Failed password for invalid user admin from 82.134.26.50 port 37853 ssh2
Jul  9 10:58:31 server_nas sshd[18414]: Failed password for invalid user ubuntu from 82.134.26.50 port 37864 ssh2
Jul  9 10:58:50 server_nas sshd[18416]: Failed password for invalid user pi from 82.134.26.50 port 37888 ssh2
Jul  9 10:59:11 server_nas sshd[18418]: Failed password for invalid user debian from 82.134.26.50 port 37909 ssh2
Jul  9 10:59:31 server_nas sshd[18420]: Failed password for invalid user osmc from 82.134.26.50 port 37931 ssh2
Jul  9 10:59:51 server_nas sshd[18422]: Failed password for invalid user ubnt from 82.134.26.50 port 37950 ssh2
Jul  9 11:00:12 server_nas sshd[18445]: Failed password for invalid user pi from 82.134.26.50 port 37972 ssh2
Jul  9 11:00:32 server_nas sshd[18447]: Failed password for invalid user bananapi from 82.134.26.50 port 37991 ssh2
Jul  9 11:00:52 server_nas sshd[18449]: Failed password for invalid user vyos from 82.134.26.50 port 38016 ssh2
Jul  9 11:01:11 server_nas sshd[18451]: Failed password for invalid user xbian from 82.134.26.50 port 38036 ssh2
Jul  9 11:01:31 server_nas sshd[18453]: Failed password for invalid user vyatta from 82.134.26.50 port 38045 ssh2
Jul  9 11:52:40 server_nas sshd[18801]: Failed password for invalid user administrator from 182.73.81.50 port 62783 ssh2
Jul  9 13:09:52 server_nas sshd[19354]: Failed password for invalid user admin from 103.254.153.113 port 60769 ssh2
Jul  9 13:09:55 server_nas sshd[19356]: Failed password for root from 103.254.153.113 port 62324 ssh2
Jul  9 13:09:59 server_nas sshd[19358]: Failed password for invalid user guest from 103.254.153.113 port 63895 ssh2
Jul  9 13:10:02 server_nas sshd[19360]: Failed password for invalid user ubnt from 103.254.153.113 port 49436 ssh2
Jul  9 13:55:21 server_nas sshd[19880]: Failed password for root from 221.140.31.77 port 50936 ssh2
Jul  9 13:55:32 server_nas sshd[19880]: message repeated 5 times: [ Failed password for root from 221.140.31.77 port 50936 ssh2]
Jul  9 16:33:35 server_nas sshd[20912]: Failed password for invalid user admin from 193.32.163.182 port 47110 ssh2
Jul  9 19:52:16 server_nas sshd[22312]: Failed password for root from 188.114.173.72 port 18029 ssh2
Jul  9 19:52:27 server_nas sshd[22312]: message repeated 5 times: [ Failed password for root from 188.114.173.72 port 18029 ssh2]
Jul  9 22:12:38 server_nas sshd[24257]: Failed password for invalid user admin from 193.32.163.182 port 35086 ssh2
Jul 10 06:25:54 server_nas sshd[3023]: Failed password for invalid user admin from 193.32.163.182 port 44804 ssh2
Jul 10 12:01:08 server_nas sshd[5787]: Failed password for invalid user admin from 193.32.163.182 port 42412 ssh2
Jul 10 15:15:05 server_nas sshd[7221]: Failed password for invalid user service from 95.234.243.155 port 36680 ssh2
Jul 10 16:33:39 server_nas sshd[7741]: Failed password for invalid user ubnt from 106.111.101.98 port 13845 ssh2
Jul 10 16:33:42 server_nas sshd[7741]: Failed password for invalid user ubnt from 106.111.101.98 port 13845 ssh2
Jul 10 16:33:44 server_nas sshd[7741]: Failed password for invalid user ubnt from 106.111.101.98 port 13845 ssh2
Jul 10 16:33:46 server_nas sshd[7741]: Failed password for invalid user ubnt from 106.111.101.98 port 13845 ssh2
Jul 10 16:33:49 server_nas sshd[7741]: Failed password for invalid user ubnt from 106.111.101.98 port 13845 ssh2
Jul 10 16:33:51 server_nas sshd[7741]: Failed password for invalid user ubnt from 106.111.101.98 port 13845 ssh2
Jul 10 21:10:30 server_nas sshd[12343]: Failed none for invalid user  from 139.162.122.110 port 51464 ssh2
Jul 11 07:08:54 server_nas sshd[3288]: Failed password for gabriele from 192.168.1.111 port 45598 ssh2
Jul 11 08:14:02 server_nas sshd[3937]: Failed password for invalid user pi from 72.68.125.94 port 39428 ssh2
Jul 11 08:14:02 server_nas sshd[3939]: Failed password for invalid user pi from 72.68.125.94 port 39434 ssh2
Jul 11 09:52:11 server_nas sshd[4581]: Failed password for root from 222.139.80.93 port 53925 ssh2
Jul 11 09:52:23 server_nas sshd[4581]: message repeated 5 times: [ Failed password for root from 222.139.80.93 port 53925 ssh2]
Jul 11 10:10:13 server_nas sshd[4733]: Failed password for invalid user user from 92.124.163.153 port 1444 ssh2
Jul 11 10:10:13 server_nas sshd[4734]: Failed password for invalid user admin from 92.124.163.153 port 2472 ssh2
Jul 11 10:10:13 server_nas sshd[4736]: Failed password for root from 92.124.163.153 port 3668 ssh2
Jul 11 10:10:16 server_nas sshd[4739]: Failed password for invalid user telecomadmin from 92.124.163.153 port 2920 ssh2
Jul 11 10:10:16 server_nas sshd[4742]: Failed password for invalid user support from 92.124.163.153 port 3454 ssh2
Jul 11 10:10:16 server_nas sshd[4741]: Failed password for invalid user admin from 92.124.163.153 port 3409 ssh2
Jul 11 10:10:17 server_nas sshd[4745]: Failed none for invalid user admin from 92.124.163.153 port 3101 ssh2
Jul 11 10:10:19 server_nas sshd[4749]: Failed password for invalid user admin from 92.124.163.153 port 2240 ssh2
Jul 11 10:10:20 server_nas sshd[4751]: Failed password for invalid user admin from 92.124.163.153 port 3677 ssh2
Jul 11 10:10:20 server_nas sshd[4747]: Failed password for invalid user admin from 92.124.163.153 port 1816 ssh2
Jul 11 10:10:23 server_nas sshd[4763]: Failed password for invalid user MGR from 92.124.163.153 port 3257 ssh2
Jul 11 10:10:24 server_nas sshd[4765]: Failed password for root from 92.124.163.153 port 3422 ssh2
Jul 11 10:10:24 server_nas sshd[4767]: Failed password for invalid user ubnt from 92.124.163.153 port 3426 ssh2
Jul 11 10:10:25 server_nas sshd[4769]: Failed password for invalid user user from 92.124.163.153 port 2290 ssh2
Jul 11 10:10:27 server_nas sshd[4771]: Failed password for invalid user engineer from 92.124.163.153 port 1530 ssh2
Jul 11 10:10:27 server_nas sshd[4773]: Failed password for invalid user superadmin from 92.124.163.153 port 3435 ssh2
Jul 11 10:10:28 server_nas sshd[4775]: Failed password for invalid user admin from 92.124.163.153 port 3170 ssh2
Jul 11 10:10:30 server_nas sshd[4777]: Failed password for invalid user admin from 92.124.163.153 port 1752 ssh2
Jul 11 10:10:30 server_nas sshd[4779]: Failed password for invalid user operator from 92.124.163.153 port 1907 ssh2
Jul 11 10:10:31 server_nas sshd[4785]: Failed none for invalid user User from 92.124.163.153 port 2668 ssh2
Jul 11 10:10:31 server_nas sshd[4783]: Failed none for invalid user Admin from 92.124.163.153 port 1592 ssh2
Jul 11 10:10:32 server_nas sshd[4781]: Failed password for root from 92.124.163.153 port 2678 ssh2
Jul 11 10:10:34 server_nas sshd[4787]: Failed password for invalid user  from 92.124.163.153 port 2530 ssh2
Jul 11 10:10:35 server_nas sshd[4789]: Failed password for invalid user Admin from 92.124.163.153 port 2497 ssh2
Jul 11 10:10:35 server_nas sshd[4791]: Failed password for invalid user superadmin from 92.124.163.153 port 2706 ssh2
Jul 11 10:10:37 server_nas sshd[4793]: Failed password for invalid user admin from 92.124.163.153 port 3773 ssh2
Jul 11 10:10:37 server_nas sshd[4795]: Failed password for invalid user admin from 92.124.163.153 port 2194 ssh2
Jul 11 10:10:37 server_nas sshd[4797]: Failed password for invalid user adsl from 92.124.163.153 port 1637 ssh2
Jul 11 10:10:40 server_nas sshd[4799]: Failed password for invalid user telecomadmin from 92.124.163.153 port 1525 ssh2
Jul 11 10:10:40 server_nas sshd[4801]: Failed password for invalid user admin from 92.124.163.153 port 2208 ssh2
Jul 11 10:10:40 server_nas sshd[4803]: Failed password for invalid user superadmin from 92.124.163.153 port 1951 ssh2
Jul 11 10:10:43 server_nas sshd[4805]: Failed password for invalid user superadmin from 92.124.163.153 port 1609 ssh2
Jul 11 10:12:25 server_nas sshd[4809]: Failed password for invalid user pi from 91.182.173.9 port 58622 ssh2
Jul 11 10:12:25 server_nas sshd[4811]: Failed password for invalid user pi from 91.182.173.9 port 58624 ssh2
Jul 11 11:16:26 server_nas sshd[5253]: Failed password for root from 122.3.19.147 port 64692 ssh2
Jul 11 12:41:35 server_nas sshd[14758]: Failed password for invalid user admin from 193.32.163.182 port 34600 ssh2
Jul 11 15:42:14 server_nas sshd[3646]: Failed password for invalid user admin from 193.32.163.182 port 56597 ssh2
Jul 11 17:13:24 server_nas sshd[12260]: Failed password for root from 180.126.239.146 port 59338 ssh2
Jul 11 17:13:34 server_nas sshd[12260]: message repeated 5 times: [ Failed password for root from 180.126.239.146 port 59338 ssh2]
Jul 11 18:10:51 server_nas sshd[14342]: Failed password for root from 218.92.0.148 port 3634 ssh2
Jul 11 18:11:05 server_nas sshd[14342]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 3634 ssh2]
Jul 11 18:11:11 server_nas sshd[14344]: Failed password for root from 218.92.0.148 port 9491 ssh2
Jul 11 18:11:24 server_nas sshd[14344]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 9491 ssh2]
Jul 11 18:11:29 server_nas sshd[14346]: Failed password for root from 218.92.0.148 port 14404 ssh2
Jul 11 18:11:44 server_nas sshd[14346]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 14404 ssh2]
Jul 11 18:11:49 server_nas sshd[14348]: Failed password for root from 218.92.0.148 port 19596 ssh2
Jul 11 18:12:02 server_nas sshd[14348]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 19596 ssh2]
Jul 11 18:12:09 server_nas sshd[14350]: Failed password for root from 218.92.0.148 port 24499 ssh2
Jul 11 18:12:23 server_nas sshd[14350]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 24499 ssh2]
Jul 11 18:12:29 server_nas sshd[14352]: Failed password for root from 218.92.0.148 port 30154 ssh2
Jul 11 18:12:32 server_nas sshd[14352]: Failed password for root from 218.92.0.148 port 30154 ssh2
Jul 11 18:12:35 server_nas sshd[14352]: Failed password for root from 218.92.0.148 port 30154 ssh2
Jul 11 18:12:43 server_nas sshd[14352]: message repeated 3 times: [ Failed password for root from 218.92.0.148 port 30154 ssh2]
Jul 11 18:12:49 server_nas sshd[14364]: Failed password for root from 218.92.0.148 port 35440 ssh2
Jul 11 18:13:04 server_nas sshd[14364]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 35440 ssh2]
Jul 11 18:13:11 server_nas sshd[14366]: Failed password for root from 218.92.0.148 port 40832 ssh2
Jul 11 18:13:25 server_nas sshd[14366]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 40832 ssh2]
Jul 11 18:13:31 server_nas sshd[14368]: Failed password for root from 218.92.0.148 port 46505 ssh2
Jul 11 18:13:45 server_nas sshd[14368]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 46505 ssh2]
Jul 11 18:13:51 server_nas sshd[14370]: Failed password for root from 218.92.0.148 port 51595 ssh2
Jul 11 18:14:05 server_nas sshd[14370]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 51595 ssh2]
Jul 11 18:14:10 server_nas sshd[14372]: Failed password for root from 218.92.0.148 port 56698 ssh2
Jul 11 18:14:25 server_nas sshd[14372]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 56698 ssh2]
Jul 11 18:14:31 server_nas sshd[14375]: Failed password for root from 218.92.0.148 port 61794 ssh2
Jul 11 18:14:45 server_nas sshd[14375]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 61794 ssh2]
Jul 11 18:14:55 server_nas sshd[14377]: Failed password for root from 218.92.0.148 port 3043 ssh2
Jul 11 18:14:59 server_nas sshd[14377]: Failed password for root from 218.92.0.148 port 3043 ssh2
Jul 11 18:15:05 server_nas sshd[14377]: Failed password for root from 218.92.0.148 port 3043 ssh2
Jul 11 18:15:11 server_nas sshd[14377]: message repeated 2 times: [ Failed password for root from 218.92.0.148 port 3043 ssh2]
Jul 11 18:15:14 server_nas sshd[14377]: Failed password for root from 218.92.0.148 port 3043 ssh2
Jul 11 18:15:22 server_nas sshd[14385]: Failed password for root from 218.92.0.148 port 35336 ssh2
Jul 11 18:15:37 server_nas sshd[14385]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 35336 ssh2]
Jul 11 18:15:43 server_nas sshd[14388]: Failed password for root from 218.92.0.148 port 43341 ssh2
Jul 11 18:15:58 server_nas sshd[14388]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 43341 ssh2]
Jul 11 18:16:05 server_nas sshd[14390]: Failed password for root from 218.92.0.148 port 50360 ssh2
Jul 11 18:16:20 server_nas sshd[14390]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 50360 ssh2]
Jul 11 18:16:25 server_nas sshd[14392]: Failed password for root from 218.92.0.148 port 57359 ssh2
Jul 11 18:16:40 server_nas sshd[14392]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 57359 ssh2]
Jul 11 18:16:52 server_nas sshd[14394]: Failed password for root from 218.92.0.148 port 64054 ssh2
Jul 11 18:16:58 server_nas sshd[14394]: message repeated 2 times: [ Failed password for root from 218.92.0.148 port 64054 ssh2]
Jul 11 18:17:02 server_nas sshd[14394]: Failed password for root from 218.92.0.148 port 64054 ssh2
Jul 11 18:17:09 server_nas sshd[14394]: message repeated 2 times: [ Failed password for root from 218.92.0.148 port 64054 ssh2]
Jul 11 18:17:17 server_nas sshd[14401]: Failed password for root from 218.92.0.148 port 9084 ssh2
Jul 11 18:17:34 server_nas sshd[14401]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 9084 ssh2]
Jul 11 18:17:42 server_nas sshd[14403]: Failed password for root from 218.92.0.148 port 17426 ssh2
Jul 11 18:17:55 server_nas sshd[14403]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 17426 ssh2]
Jul 11 18:18:04 server_nas sshd[14405]: Failed password for root from 218.92.0.148 port 24964 ssh2
Jul 11 18:18:18 server_nas sshd[14405]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 24964 ssh2]
Jul 11 18:18:24 server_nas sshd[14407]: Failed password for root from 218.92.0.148 port 32629 ssh2
Jul 11 18:18:27 server_nas sshd[14407]: Failed password for root from 218.92.0.148 port 32629 ssh2
Jul 11 18:18:30 server_nas sshd[14407]: Failed password for root from 218.92.0.148 port 32629 ssh2
Jul 11 18:18:38 server_nas sshd[14407]: message repeated 3 times: [ Failed password for root from 218.92.0.148 port 32629 ssh2]
Jul 11 18:18:43 server_nas sshd[14419]: Failed password for root from 218.92.0.148 port 39559 ssh2
Jul 11 18:18:57 server_nas sshd[14419]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 39559 ssh2]
Jul 11 18:19:04 server_nas sshd[14421]: Failed password for root from 218.92.0.148 port 46143 ssh2
Jul 11 18:19:18 server_nas sshd[14421]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 46143 ssh2]
Jul 11 18:19:24 server_nas sshd[14423]: Failed password for root from 218.92.0.148 port 56531 ssh2
Jul 11 18:19:38 server_nas sshd[14423]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 56531 ssh2]
Jul 11 18:19:44 server_nas sshd[14426]: Failed password for root from 218.92.0.148 port 65265 ssh2
Jul 11 18:19:57 server_nas sshd[14426]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 65265 ssh2]
Jul 11 18:20:03 server_nas sshd[14428]: Failed password for root from 218.92.0.148 port 7640 ssh2
Jul 11 18:20:06 server_nas sshd[14428]: Failed password for root from 218.92.0.148 port 7640 ssh2
Jul 11 18:20:18 server_nas sshd[14428]: message repeated 4 times: [ Failed password for root from 218.92.0.148 port 7640 ssh2]
Jul 11 18:20:25 server_nas sshd[14451]: Failed password for root from 218.92.0.148 port 14811 ssh2
Jul 11 18:20:39 server_nas sshd[14451]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 14811 ssh2]
Jul 11 18:20:45 server_nas sshd[14454]: Failed password for root from 218.92.0.148 port 22065 ssh2
Jul 11 18:21:01 server_nas sshd[14454]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 22065 ssh2]
Jul 11 18:21:06 server_nas sshd[14457]: Failed password for root from 218.92.0.148 port 29657 ssh2
Jul 11 18:21:21 server_nas sshd[14457]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 29657 ssh2]
Jul 11 18:21:28 server_nas sshd[14459]: Failed password for root from 218.92.0.148 port 36565 ssh2
Jul 11 18:21:43 server_nas sshd[14459]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 36565 ssh2]
Jul 11 18:21:49 server_nas sshd[14461]: Failed password for root from 218.92.0.148 port 43879 ssh2
Jul 11 18:22:04 server_nas sshd[14461]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 43879 ssh2]
Jul 11 18:22:10 server_nas sshd[14463]: Failed password for root from 218.92.0.148 port 50853 ssh2
Jul 11 18:22:24 server_nas sshd[14463]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 50853 ssh2]
Jul 11 18:22:32 server_nas sshd[14465]: Failed password for root from 218.92.0.148 port 61922 ssh2
Jul 11 18:22:46 server_nas sshd[14465]: message repeated 5 times: [ Failed password for root from 218.92.0.148 port 61922 ssh2]```

GiaNN

[cancellato] eh diciamo che erano un po' ingenui i padri di internet

uiblog.it

GiaNN

Da certi punti di vista è peggiorato, in altri ambiti si è evoluto.
Pi comunque è lo user di default dei Raspberry (forse avevi un pihole su uno dei loro prodotti).

[cancellato]

GiaNN …be… l’hai detta grossa… come dire…. un protocollo per collegare inizialmente 4 nodi e che ora viene usato da miliardi e miliardi… non mi sembra tanto una ingenuità.

GiaNN

uiblog.it si per un po' ho avuto un Raspi 3B+, esperienza traumatica e che non rifarò mai più...
Il log però è su un altro server che non era sul raspi, probabilmente i bot provano con pi perché comunque è piuttosto diffuso come fermacarte.
Il pihole lo ho tutt'ora sul mio Nas

[cancellato]

uiblog.it in realtà il protocollo è sempre lo stesso

[cancellato]

GiaNN il termine fermacarte viene utilizzato quando non è più utilizzabile…

GiaNN

[cancellato] beh non dico per quello, dico anche per il fatto che un sacco di cose son state progettate fidandosi subito dei soggetti utilizzatori e poi quando ci si è scontrati con la realtà si è dovuto mettere delle pezze.

[cancellato]

GiaNN tipo che pezze?

GiaNN

[cancellato] si perché secondo me è la cosa per cui meglio si presta specie il 3B+.
Da me lo è diventato piuttosto velocemente (e di fogli col vento non riusciva nemmeno a tenerne tanti)

GiaNN

[cancellato] i vari protocolli di cifratura che spesso vengono fatti dopo (perlomeno a detta del mio professore universitario di informatica e sicurezza informatica)

[cancellato]

GiaNN ma quello non è Internet e non sono una pezza. sono sopra il layer di rete.
mi sa che ti sei perso qualche lezione.

Per pezza, nel linguaggio comune, sono correzioni o nuovi protocolli (adiacenti) al livello 3, hai cannato il concetto.

Ancora dopo anni dalla sua progettazione e SENZA PEZZE, stiamo usando IP (per l'appunto come protocollo, da cui deriva il nome Internet per il linguaggio convenzionale) dello stack ISO/OSI per navigare e fare operazioni sicure su Internet!

Notare il "su" come sia volutamente in grassetto. Non è un caso. Riflettici. Tutto si basa su un protocollo tutt'ora immodificato da decenni.

« Pagina precedente Pagina successiva »