zacburgess Posted April 11, 2015 Share Posted April 11, 2015 Hi all I have just upgraded to v6 and my disks wont go sleep. So i looked at my syslog and this is what i am getting over and over. Apr 11 20:28:54 Tower sshd[2450]: Failed password for root from 43.255.190.150 port 42958 ssh2 Apr 11 20:28:55 Tower sshd[2450]: Received disconnect from 43.255.190.150: 11: [preauth] Apr 11 20:28:57 Tower sshd[2477]: Failed password for root from 43.255.190.150 port 48909 ssh2 Apr 11 20:28:57 Tower sshd[2477]: Failed password for root from 43.255.190.150 port 48909 ssh2 Apr 11 20:28:57 Tower sshd[2477]: Failed password for root from 43.255.190.150 port 48909 ssh2 Apr 11 20:28:58 Tower sshd[2477]: Received disconnect from 43.255.190.150: 11: [preauth] Apr 11 20:29:00 Tower sshd[2509]: Failed password for root from 43.255.190.150 port 53910 ssh2 Apr 11 20:29:00 Tower sshd[2509]: Failed password for root from 43.255.190.150 port 53910 ssh2 Apr 11 20:29:00 Tower sshd[2509]: Failed password for root from 43.255.190.150 port 53910 ssh2 Apr 11 20:29:01 Tower sshd[2509]: Received disconnect from 43.255.190.150: 11: [preauth] Apr 11 20:29:03 Tower sshd[2536]: Failed password for root from 43.255.190.150 port 59650 ssh2 Apr 11 20:29:03 Tower sshd[2536]: Failed password for root from 43.255.190.150 port 59650 ssh2 Apr 11 20:29:03 Tower sshd[2536]: Failed password for root from 43.255.190.150 port 59650 ssh2 Apr 11 20:29:04 Tower sshd[2536]: Received disconnect from 43.255.190.150: 11: [preauth] Apr 11 20:29:06 Tower sshd[2571]: Failed password for root from 43.255.190.150 port 37317 ssh2 Apr 11 20:29:06 Tower sshd[2571]: Failed password for root from 43.255.190.150 port 37317 ssh2 Apr 11 20:29:06 Tower sshd[2571]: Failed password for root from 43.255.190.150 port 37317 ssh2 Apr 11 20:29:07 Tower sshd[2571]: Received disconnect from 43.255.190.150: 11: [preauth] Apr 11 20:29:09 Tower sshd[2600]: Failed password for root from 43.255.190.150 port 42441 ssh2 Apr 11 20:29:09 Tower sshd[2600]: Failed password for root from 43.255.190.150 port 42441 ssh2 Apr 11 20:29:09 Tower sshd[2600]: Failed password for root from 43.255.190.150 port 42441 ssh2 Apr 11 20:29:10 Tower sshd[2600]: Received disconnect from 43.255.190.150: 11: [preauth] Apr 11 20:29:12 Tower sshd[2636]: Failed password for root from 43.255.190.150 port 48092 ssh2 Apr 11 20:29:12 Tower sshd[2636]: Failed password for root from 43.255.190.150 port 48092 ssh2 Apr 11 20:29:12 Tower sshd[2636]: Failed password for root from 43.255.190.150 port 48092 ssh2 Apr 11 20:29:13 Tower sshd[2636]: Received disconnect from 43.255.190.150: 11: [preauth] Apr 11 20:29:15 Tower sshd[2663]: Failed password for root from 43.255.190.150 port 53696 ssh2 Apr 11 20:29:15 Tower sshd[2663]: Failed password for root from 43.255.190.150 port 53696 ssh2 Apr 11 20:29:15 Tower sshd[2663]: Failed password for root from 43.255.190.150 port 53696 ssh2 Apr 11 20:29:16 Tower sshd[2663]: Received disconnect from 43.255.190.150: 11: [preauth] Apr 11 20:29:18 Tower sshd[2690]: Failed password for root from 43.255.190.150 port 58797 ssh2 Apr 11 20:29:18 Tower sshd[2690]: Failed password for root from 43.255.190.150 port 58797 ssh2 Apr 11 20:29:18 Tower sshd[2690]: Failed password for root from 43.255.190.150 port 58797 ssh2 Apr 11 20:29:19 Tower sshd[2690]: Received disconnect from 43.255.190.150: 11: [preauth] Apr 11 20:29:21 Tower sshd[2718]: Failed password for root from 43.255.190.150 port 36551 ssh2 Apr 11 20:29:21 Tower sshd[2718]: Failed password for root from 43.255.190.150 port 36551 ssh2 Apr 11 20:29:21 Tower sshd[2718]: Failed password for root from 43.255.190.150 port 36551 ssh2 Apr 11 20:29:22 Tower sshd[2718]: Received disconnect from 43.255.190.150: 11: [preauth] Apr 11 20:29:24 Tower sshd[2750]: Failed password for root from 43.255.190.150 port 41946 ssh2 Apr 11 20:29:24 Tower sshd[2750]: Failed password for root from 43.255.190.150 port 41946 ssh2 Apr 11 20:29:24 Tower sshd[2750]: Failed password for root from 43.255.190.150 port 41946 ssh2 Model: N/A System: - MS-7093 CPU: AMD Athlon 64 3500+ @ 2190 Cache: 128 kB, 512 kB Memory: 32768 MB (max. installable capacity 2 GB) Network: eth0: 100Mb/s - Full Duplex Kernel: Linux 3.18.5-unRAID x86_64 OpenSSL: 1.0.1k Running docker CouchPotato, PlexMediaServer, SABnzbd, SickBeard Hope someone knows what this mean. Link to comment
JonathanM Posted April 11, 2015 Share Posted April 11, 2015 You are actively being attacked. I would remove any and all port forwarding rules pointing to your server. Link to comment
zacburgess Posted April 11, 2015 Author Share Posted April 11, 2015 Thank you jonathanm. I have got rid of all my port forwarding rules part from my plex, I have just upgraded and I dont need getting attacked. I am trying to sort all my docker apps out. Link to comment
JonathanM Posted April 12, 2015 Share Posted April 12, 2015 Thank you jonathanm. I have got rid of all my port forwarding rules part from my plex, I have just upgraded and I dont need getting attacked. I am trying to sort all my docker apps out. Check your router to make sure there are no ports forwarded, or that your server IP is in the DMZ. Link to comment
Recommended Posts
Archived
This topic is now archived and is closed to further replies.