O que seria isso?? Alguem tentando acessar meu servidor Mikrotik???

Quando abri o "New Terminal" vi essa mensagem

(728 messages not shown)
jun/03/2008 23:28:50 system,error,critical login failure for user joan from 148.
208.195.11 via ssh
jun/03/2008 23:28:53 system,error,critical login failure for user johan from 148
.208.195.11 via ssh
jun/03/2008 23:28:57 system,error,critical login failure for user sebastian from
148.208.195.11 via ssh
jun/03/2008 23:29:03 system,error,critical login failure for user agata from 148
.208.195.11 via ssh
jun/03/2008 23:29:06 system,error,critical login failure for user administrator
from 148.208.195.11 via ssh
jun/03/2008 23:29:10 system,error,critical login failure for user root from 148.
208.195.11 via ssh
jun/03/2008 23:29:13 system,error,critical login failure for user alexandre from
148.208.195.11 via ssh
jun/03/2008 23:29:17 system,error,critical login failure for user joseluis from
148.208.195.11 via ssh
Terminal vt102 detected, using multiline input mode

Alguem tentando acessar o server?
Se sim, teria alguma regra pra bloquear e proteger?
Obrigado.

Citação:

---

Postado originalmente por JeanGutemberg

Quando abri o "New Terminal" vi essa mensagem

(728 messages not shown)
jun/03/2008 23:28:50 system,error,critical login failure for user joan from 148.
208.195.11 via ssh
jun/03/2008 23:28:53 system,error,critical login failure for user johan from 148
.208.195.11 via ssh
jun/03/2008 23:28:57 system,error,critical login failure for user sebastian from
148.208.195.11 via ssh
jun/03/2008 23:29:03 system,error,critical login failure for user agata from 148
.208.195.11 via ssh
jun/03/2008 23:29:06 system,error,critical login failure for user administrator
from 148.208.195.11 via ssh
jun/03/2008 23:29:10 system,error,critical login failure for user root from 148.
208.195.11 via ssh
jun/03/2008 23:29:13 system,error,critical login failure for user alexandre from
148.208.195.11 via ssh
jun/03/2008 23:29:17 system,error,critical login failure for user joseluis from
148.208.195.11 via ssh
Terminal vt102 detected, using multiline input mode

Alguem tentando acessar o server?
Se sim, teria alguma regra pra bloquear e proteger?
Obrigado.

---

sim, é isso mesmo!

Citação:

---

Postado originalmente por JeanGutemberg

Quando abri o "New Terminal" vi essa mensagem

(728 messages not shown)
jun/03/2008 23:28:50 system,error,critical login failure for user joan from 148.
208.195.11 via ssh
jun/03/2008 23:28:53 system,error,critical login failure for user johan from 148
.208.195.11 via ssh
jun/03/2008 23:28:57 system,error,critical login failure for user sebastian from
148.208.195.11 via ssh
jun/03/2008 23:29:03 system,error,critical login failure for user agata from 148
.208.195.11 via ssh
jun/03/2008 23:29:06 system,error,critical login failure for user administrator
from 148.208.195.11 via ssh
jun/03/2008 23:29:10 system,error,critical login failure for user root from 148.
208.195.11 via ssh
jun/03/2008 23:29:13 system,error,critical login failure for user alexandre from
148.208.195.11 via ssh
jun/03/2008 23:29:17 system,error,critical login failure for user joseluis from
148.208.195.11 via ssh
Terminal vt102 detected, using multiline input mode

Alguem tentando acessar o server?
Se sim, teria alguma regra pra bloquear e proteger?
Obrigado.

---

sim, é isso mesmo!

No meu caso desativei o ssh para rede externa:
ip > services

mas, também pode ser feito bloqueio via firewall em
ip > firewall >filter rule e faça drop tudo com destino a porta 22 que venha da interface publica


*desculpe, postei duplicado. A inteção era editar.

concerteza é invasão, eu tbm desativei o ssh e resolveu.

Renato Costa.

além do pessoal tentar acessar por SSH, por telnet tambem é bastante utilizado

melhor forma vc dar um drop nas portas 21, 22, 23, 80, 3128

muda a porta do http do teu mikrotik pra outra porta que so vc sabe...