Злоумышленники специализируются на компрометации сетевых роутеров в Бразилии / Comments / Habr

qwerty1023 Oct 28 2016 at 16:40

Когда я в своем роутере дописал логирование неудачных заходов в веб-интерфейс, года 3 назад, попытки подбора пароля случались очень редко, раз в неделю-две. И при переборе использовалось довольно мало логин-паролей (в основном самые стандартные типа admin:admin да admin:1234). Сейчас же такое случается минимум по 2-3 раза в день и это уже куча (20-50 комбинаций) попыток!

например

Oct 28 12:16:02 goahead[1226]: Access Denied — Requires User ID from 185.25.148.240:Mozilla/5.0 (Windows NT 5.1; rv:32.0) Gecko/20100101 Firefox/31.0
Oct 28 12:16:52 goahead[1226]: Access Denied — Requires User ID from 185.49.14.190:Mozilla/5.0 (Windows NT 5.1; rv:32.0) Gecko/20100101 Firefox/31.0
Oct 28 15:18:09 goahead[1226]: Access Denied — Requires User ID from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:09 goahead[1226]: Access Denied — Requires Password from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:09 goahead[1226]: Access Denied — Wrong Password: admin-admin from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:09 goahead[1226]: Access Denied — Wrong Password: admin-1234 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:10 goahead[1226]: Access Denied — Wrong Password: admin-password from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:10 goahead[1226]: Access Denied — Unknown User: Admin-Admin from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:10 goahead[1226]: Access Denied — Requires User ID from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:10 goahead[1226]: Access Denied — Unknown User: root- from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:10 goahead[1226]: Access Denied — Unknown User: root-admin from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:11 goahead[1226]: Access Denied — Unknown User: root-admin from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:11 goahead[1226]: Access Denied — Unknown User: root-root from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:11 goahead[1226]: Access Denied — Unknown User: root-public from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:11 goahead[1226]: Access Denied — Wrong Password: admin-nimda from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:11 goahead[1226]: Access Denied — Wrong Password: admin-adminadmin from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:12 goahead[1226]: Access Denied — Wrong Password: admin-gfhjkm from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:12 goahead[1226]: Access Denied — Wrong Password: admin-airlive from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:12 goahead[1226]: Access Denied — Unknown User: airlive-airlive from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:12 goahead[1226]: Access Denied — Requires User ID from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:13 goahead[1226]: Access Denied — Requires User ID from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:13 goahead[1226]: Access Denied — Unknown User: support- from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:13 goahead[1226]: Access Denied — Unknown User: support-support from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:13 goahead[1226]: Access Denied — Unknown User: super-super from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:13 goahead[1226]: Access Denied — Unknown User: super-APR@xuniL from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:14 goahead[1226]: Access Denied — Unknown User: super-APR@xuniL from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:14 goahead[1226]: Access Denied — Unknown User: super-zxcvbnm,./ from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:14 goahead[1226]: Access Denied — Wrong Password: admin-onlime from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:14 goahead[1226]: Access Denied — Unknown User: super-asong from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:14 goahead[1226]: Access Denied — Wrong Password: admin-mts from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:15 goahead[1226]: Access Denied — Unknown User: mts-mts from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:15 goahead[1226]: Access Denied — Unknown User: telecomadmin-admintelecom from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:15 goahead[1226]: Access Denied — Unknown User: mgts-mtsoao from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:15 goahead[1226]: Access Denied — Wrong Password: admin-Uq-4GIt3M from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:15 goahead[1226]: Access Denied — Requires User ID from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:16 goahead[1226]: Access Denied — Requires User ID from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:16 goahead[1226]: Access Denied — Unknown User: kyivstar-kyivstar from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:16 goahead[1226]: Access Denied — Wrong Password: admin-0508780503 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:16 goahead[1226]: Access Denied — Unknown User: telekom-telekom from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:16 goahead[1226]: Access Denied — Unknown User: superadmin-Is$uper@dmin from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:17 goahead[1226]: Access Denied — Wrong Password: admin-dPZb4GJTu9 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:17 goahead[1226]: Access Denied — Wrong Password: admin-2w4f6n8k from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:17 goahead[1226]: Access Denied — Wrong Password: admin-szt from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:17 goahead[1226]: Access Denied — Wrong Password: admin-radmin from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:17 goahead[1226]: Access Denied — Wrong Password: admin-RTadmin1979 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:18 goahead[1226]: Access Denied — Wrong Password: admin-RTadmin1979 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:18 goahead[1226]: Access Denied — Unknown User: engineer-amplifier from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:18 goahead[1226]: Access Denied — Wrong Password: admin-1 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:18 goahead[1226]: Access Denied — Wrong Password: admin-123 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:18 goahead[1226]: Access Denied — Wrong Password: admin-0000 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:19 goahead[1226]: Access Denied — Wrong Password: admin-00000000 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:19 goahead[1226]: Access Denied — Wrong Password: admin-12345 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:19 goahead[1226]: Access Denied — Wrong Password: admin-123456 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:19 goahead[1226]: Access Denied — Wrong Password: admin-1234567 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:20 goahead[1226]: Access Denied — Wrong Password: admin-12345678 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:20 goahead[1226]: Access Denied — Wrong Password: admin-123456789 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:20 goahead[1226]: Access Denied — Wrong Password: admin-1234567890 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:20 goahead[1226]: Access Denied — Wrong Password: admin-qwerty from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:20 goahead[1226]: Access Denied — Wrong Password: admin-beeline from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:21 goahead[1226]: Access Denied — Wrong Password: admin-beeline from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:21 goahead[1226]: Access Denied — Wrong Password: admin-beeline2013 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:21 goahead[1226]: Access Denied — Wrong Password: admin-iyeh from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:21 goahead[1226]: Access Denied — Wrong Password: admin-ghbdtn from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:21 goahead[1226]: Access Denied — Wrong Password: admin-admin225 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:22 goahead[1226]: Access Denied — Wrong Password: admin-rombik1 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:22 goahead[1226]: Access Denied — Wrong Password: admin-ho4uku6at from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:22 goahead[1226]: Access Denied — Wrong Password: admin-juklop from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:22 goahead[1226]: Access Denied — Wrong Password: admin-free from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:23 goahead[1226]: Access Denied — Wrong Password: admin-inet from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:23 goahead[1226]: Access Denied — Wrong Password: admin-internet from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:23 goahead[1226]: Access Denied — Wrong Password: admin-asus from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:23 goahead[1226]: Access Denied — Wrong Password: admin-root from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:24 goahead[1226]: Access Denied — Wrong Password: admin-ADMIN from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:24 goahead[1226]: Access Denied — Wrong Password: admin-adsl from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:24 goahead[1226]: Access Denied — Wrong Password: admin-adslroot from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:24 goahead[1226]: Access Denied — Wrong Password: admin-adsladmin from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:25 goahead[1226]: Access Denied — Wrong Password: admin-Ferum from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:25 goahead[1226]: Access Denied — Wrong Password: admin-Ferrum from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:25 goahead[1226]: Access Denied — Wrong Password: admin-FERUM from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:26 goahead[1226]: Access Denied — Wrong Password: admin-FERRUM from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:26 goahead[1226]: Access Denied — Wrong Password: admin-Kendalf9 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:26 goahead[1226]: Access Denied — Wrong Password: admin-263297 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:26 goahead[1226]: Access Denied — Wrong Password: admin-590152 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:27 goahead[1226]: Access Denied — Wrong Password: admin-21232 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:27 goahead[1226]: Access Denied — Wrong Password: admin-adn8pzszk from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:27 goahead[1226]: Access Denied — Wrong Password: admin-amvqnekk from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:27 goahead[1226]: Access Denied — Wrong Password: admin-biyshs9eq from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:27 goahead[1226]: Access Denied — Wrong Password: admin-e2b81d_1 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:28 goahead[1226]: Access Denied — Wrong Password: admin-e2b81d_1 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:28 goahead[1226]: Access Denied — Wrong Password: admin-Dkdk8e89 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:28 goahead[1226]: Access Denied — Wrong Password: admin-flvbyctnb from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:28 goahead[1226]: Access Denied — Wrong Password: admin-qweasdOP from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:28 goahead[1226]: Access Denied — Wrong Password: admin-EbS2P8 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:29 goahead[1226]: Access Denied — Wrong Password: admin-FhF8WS from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:29 goahead[1226]: Access Denied — Wrong Password: admin-ZmqVfo from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:29 goahead[1226]: Access Denied — Wrong Password: admin-ZmqVfo1 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:29 goahead[1226]: Access Denied — Wrong Password: admin-ZmqVfo2 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:30 goahead[1226]: Access Denied — Wrong Password: admin-ZmqVfo3 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:30 goahead[1226]: Access Denied — Wrong Password: admin-ZmqVfo4 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:30 goahead[1226]: Access Denied — Wrong Password: admin-ZmqVfoVPN from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:30 goahead[1226]: Access Denied — Wrong Password: admin-ZmqVfoSIP from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:30 goahead[1226]: Access Denied — Wrong Password: admin-ZmqVfoN1 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:31 goahead[1226]: Access Denied — Wrong Password: admin-ZmqVfoN2 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:31 goahead[1226]: Access Denied — Wrong Password: admin-ZmqVfoN3 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:31 goahead[1226]: Access Denied — Wrong Password: admin-ZmqVfoN4 from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:31 goahead[1226]: Access Denied — Wrong Password: admin-9f4r5r79// from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:32 goahead[1226]: Access Denied — Wrong Password: admin-airocon from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:32 goahead[1226]: Access Denied — Wrong Password: admin-zyxel from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:32 goahead[1226]: Access Denied — Unknown User: adsl-realtek from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:32 goahead[1226]: Access Denied — Unknown User: osteam-5up from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:33 goahead[1226]: Access Denied — Unknown User: root-toor from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:33 goahead[1226]: Access Denied — Unknown User: ZXDSL-ZXDSL from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:33 goahead[1226]: Access Denied — Requires User ID from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:34 goahead[1226]: Access Denied — Unknown User: Cisco-Cisco from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:34 goahead[1226]: Access Denied — Requires User ID from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:34 goahead[1226]: Access Denied — Unknown User: cisco-cisco from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:35 goahead[1226]: Access Denied — Unknown User: cisco-cisco from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:35 goahead[1226]: Access Denied — Wrong Password: admin-default from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:35 goahead[1226]: Access Denied — Wrong Password: admin-cisco from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:35 goahead[1226]: Access Denied — Wrong Password: admin-changeme from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:35 goahead[1226]: Access Denied — Requires User ID from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:36 goahead[1226]: Access Denied — Requires User ID from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:37 goahead[1226]: Access Denied — Unknown User: enable-cisco from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:37 goahead[1226]: Access Denied — Unknown User: pnadmin-pnadmin from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:37 goahead[1226]: Access Denied — Unknown User: root-attack from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:37 goahead[1226]: Access Denied — Unknown User: root-Cisco from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:38 goahead[1226]: Access Denied — Unknown User: user- from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:38 goahead[1226]: Access Denied — Unknown User: user-user from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 15:18:38 goahead[1226]: Access Denied — Requires User ID from 185.153.198.238:Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Oct 28 16:18:14 goahead[1226]: Access Denied — Requires User ID from 163.172.67.30:curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.21 Basic ECC zlib/1.2.3 libidn/1.18 libssh2/1.4.2

Comments 14

handicraftsman Oct 28 2016 at 14:59

`8.8.8.8` — не собираюсь я свою историю посещений гуглу передавать!

xwild Oct 28 2016 at 18:03

А кому ее лучше передать?

AngelNet Oct 28 2016 at 18:06

если бы только историю посещений.
я давно обнаружил, что при использовании паблик днс-ов корпорации добра некоторые «нелегитимные» сайты становятся недоступны.
в основном это варез и пиратские фильмы. т.е. гугл решает за нас, что нам смотреть, а что нет и это помимо цензуры роскомпозора.
— вобщем только «свои» днс и никаких халявных «плюшек».

Ruich Oct 30 2016 at 20:44

Можете привести пример? Хотелось бы сравнить с результатом для серверов от своего провайдера и от OpenNIC.

mazahakajay Oct 28 2016 at 23:46

Кого посоветуете?

dartraiden Oct 29 2016 at 16:08

Я себе выбрал пару серверов от сообщества OpenNIC. Можно выбрать ближайшие, а можно и по другим параметрам (по отсутствию логов, например). Все серверы предоставлены добровольцами.

Либо поднять DNSCrypt (на роутере или локально). Там тоже серверы на любой вкус: от компаний (OpenDNS, Yandex) до обычных энтузиастов.

mazahakajay Oct 28 2016 at 23:39

Такая же проблема возникла, но где-то год назад. На роутере имеется встроенная защита («называется защита от сканирования портов и атак DoS», по умолчанию включена), пришлось отключить иначе скорость проседала раза в 3. Видать не справляется желека (

altai2013 Oct 28 2016 at 18:06

Разве авторизация в маршрутизаторе не выключена по умолчанию на WAN-порту? IPv6, вроде бы, тоже отключается производителями в заводских настройках. Если это так, то трудно понять, что делает атаки маршрутизаторов столь популярными.

user004 Oct 29 2016 at 09:16

Если я уже авторизирован в веб интерфейсе, то гет запросы будут работать? Если да, то проблема тут не только в паролях.

user004 Oct 29 2016 at 14:52

Имел в виду гет-запросы, влияющие на изменение настроек.

Germanets Oct 29 2016 at 10:09

Как я понимаю, ещё одним вариантом защиты от такой атаки может быть смена IP-адреса роутера на отличный от стандартных, по которым и идёт перебор в коде страницы.

UFO just landed and posted this here

Stihotvor_py Oct 30 2016 at 09:52

Не панацея, если в Gateway прописан адрес роутера.