Jump to content

humantoad

Members
  • Posts

    3
  • Joined

  • Last visited

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

humantoad's Achievements

Newbie

Newbie (1/14)

  1. Someone is trying to bruteforce the ssh password for sure. Tue Mar 28 09:14:11 2017 auth.info sshd[4468]: Failed password for root from 183.214.141.104 port 14350 ssh2 Tue Mar 28 09:14:12 2017 auth.info sshd[4468]: Failed password for root from 183.214.141.104 port 14350 ssh2 Tue Mar 28 09:14:13 2017 auth.info sshd[4468]: Failed password for root from 183.214.141.104 port 14350 ssh2 Tue Mar 28 09:14:14 2017 auth.info sshd[4468]: Failed password for root from 183.214.141.104 port 14350 ssh2 Tue Mar 28 09:14:15 2017 auth.info sshd[4468]: Failed password for root from 183.214.141.104 port 14350 ssh2 Tue Mar 28 09:14:16 2017 auth.info sshd[4468]: Failed password for root from 183.214.141.104 port 14350 ssh2 Is there something like fail2ban for the pineapple distro?
  2. Thanks, It's probabbly someone trying to bruteforce it then. Good thing I have a strong password. None of the suggested commands are installed, or in the included repository. Are there any alternatives? Also, can't seem to find access logs? Not familiar with the installed distro at all.
  3. Hi, Please disregard this if it's expected behaviour. I've been using the wifi pineapple on and off, for a while now, but today logged in over SSH for the first time when I started wondering why the CPU utilisation spiked. Running netstat -ant showed two established SSH connections to IP:s that are in china. Being a paranoid person, I freaked and restored factory settings, went through the setup process and logged in over SSH again only to find the same IP:s as established sessions on SSH. Now, I haven't gone through the firmware restore, since I figured I'd ask the forums if this is expected behavior and if it isn't how can I go about finding out how the connections orginate and what they are doing on the box. Any and all help would be greatly apreciated.
×
×
  • Create New...