SOLVED just upgraded to v6 and I am seeing this in my syslog

[zacburgess]

Hi all I have just upgraded to v6 and my disks wont go sleep. So i looked at my syslog and this is what i am getting over and over.

 

Apr 11 20:28:54 Tower sshd[2450]: Failed password for root from 43.255.190.150 port 42958 ssh2

Apr 11 20:28:55 Tower sshd[2450]: Received disconnect from 43.255.190.150: 11: [preauth]

Apr 11 20:28:57 Tower sshd[2477]: Failed password for root from 43.255.190.150 port 48909 ssh2

Apr 11 20:28:57 Tower sshd[2477]: Failed password for root from 43.255.190.150 port 48909 ssh2

Apr 11 20:28:57 Tower sshd[2477]: Failed password for root from 43.255.190.150 port 48909 ssh2

Apr 11 20:28:58 Tower sshd[2477]: Received disconnect from 43.255.190.150: 11: [preauth]

Apr 11 20:29:00 Tower sshd[2509]: Failed password for root from 43.255.190.150 port 53910 ssh2

Apr 11 20:29:00 Tower sshd[2509]: Failed password for root from 43.255.190.150 port 53910 ssh2

Apr 11 20:29:00 Tower sshd[2509]: Failed password for root from 43.255.190.150 port 53910 ssh2

Apr 11 20:29:01 Tower sshd[2509]: Received disconnect from 43.255.190.150: 11: [preauth]

Apr 11 20:29:03 Tower sshd[2536]: Failed password for root from 43.255.190.150 port 59650 ssh2

Apr 11 20:29:03 Tower sshd[2536]: Failed password for root from 43.255.190.150 port 59650 ssh2

Apr 11 20:29:03 Tower sshd[2536]: Failed password for root from 43.255.190.150 port 59650 ssh2

Apr 11 20:29:04 Tower sshd[2536]: Received disconnect from 43.255.190.150: 11: [preauth]

Apr 11 20:29:06 Tower sshd[2571]: Failed password for root from 43.255.190.150 port 37317 ssh2

Apr 11 20:29:06 Tower sshd[2571]: Failed password for root from 43.255.190.150 port 37317 ssh2

Apr 11 20:29:06 Tower sshd[2571]: Failed password for root from 43.255.190.150 port 37317 ssh2

Apr 11 20:29:07 Tower sshd[2571]: Received disconnect from 43.255.190.150: 11: [preauth]

Apr 11 20:29:09 Tower sshd[2600]: Failed password for root from 43.255.190.150 port 42441 ssh2

Apr 11 20:29:09 Tower sshd[2600]: Failed password for root from 43.255.190.150 port 42441 ssh2

Apr 11 20:29:09 Tower sshd[2600]: Failed password for root from 43.255.190.150 port 42441 ssh2

Apr 11 20:29:10 Tower sshd[2600]: Received disconnect from 43.255.190.150: 11: [preauth]

Apr 11 20:29:12 Tower sshd[2636]: Failed password for root from 43.255.190.150 port 48092 ssh2

Apr 11 20:29:12 Tower sshd[2636]: Failed password for root from 43.255.190.150 port 48092 ssh2

Apr 11 20:29:12 Tower sshd[2636]: Failed password for root from 43.255.190.150 port 48092 ssh2

Apr 11 20:29:13 Tower sshd[2636]: Received disconnect from 43.255.190.150: 11: [preauth]

Apr 11 20:29:15 Tower sshd[2663]: Failed password for root from 43.255.190.150 port 53696 ssh2

Apr 11 20:29:15 Tower sshd[2663]: Failed password for root from 43.255.190.150 port 53696 ssh2

Apr 11 20:29:15 Tower sshd[2663]: Failed password for root from 43.255.190.150 port 53696 ssh2

Apr 11 20:29:16 Tower sshd[2663]: Received disconnect from 43.255.190.150: 11: [preauth]

Apr 11 20:29:18 Tower sshd[2690]: Failed password for root from 43.255.190.150 port 58797 ssh2

Apr 11 20:29:18 Tower sshd[2690]: Failed password for root from 43.255.190.150 port 58797 ssh2

Apr 11 20:29:18 Tower sshd[2690]: Failed password for root from 43.255.190.150 port 58797 ssh2

Apr 11 20:29:19 Tower sshd[2690]: Received disconnect from 43.255.190.150: 11: [preauth]

Apr 11 20:29:21 Tower sshd[2718]: Failed password for root from 43.255.190.150 port 36551 ssh2

Apr 11 20:29:21 Tower sshd[2718]: Failed password for root from 43.255.190.150 port 36551 ssh2

Apr 11 20:29:21 Tower sshd[2718]: Failed password for root from 43.255.190.150 port 36551 ssh2

Apr 11 20:29:22 Tower sshd[2718]: Received disconnect from 43.255.190.150: 11: [preauth]

Apr 11 20:29:24 Tower sshd[2750]: Failed password for root from 43.255.190.150 port 41946 ssh2

Apr 11 20:29:24 Tower sshd[2750]: Failed password for root from 43.255.190.150 port 41946 ssh2

Apr 11 20:29:24 Tower sshd[2750]: Failed password for root from 43.255.190.150 port 41946 ssh2

 

Model: N/A

System: - MS-7093

CPU: AMD Athlon 64 3500+ @ 2190

Cache: 128 kB, 512 kB

Memory: 32768 MB (max. installable capacity 2 GB)

Network: eth0: 100Mb/s - Full Duplex

Kernel: Linux 3.18.5-unRAID x86_64

OpenSSL: 1.0.1k

 

Running docker CouchPotato, PlexMediaServer, SABnzbd, SickBeard

 

Hope someone knows what this mean.

[JonathanM]

You are actively being attacked. I would remove any and all port forwarding rules pointing to your server.

[zacburgess]

Thank you jonathanm. I have got rid of all my port forwarding rules part from my plex, I have just upgraded and I dont need getting attacked. I am trying to sort all my docker apps out.

[JonathanM]

Thank you jonathanm. I have got rid of all my port forwarding rules part from my plex, I have just upgraded and I dont need getting attacked. I am trying to sort all my docker apps out.

Check your router to make sure there are no ports forwarded, or that your server IP is in the DMZ.