1. Forum
  3. EasyIoT server
  5. General
  7. Authorisation tries from 94.23.169.106

Authorisation tries from 94.23.169.106

8 years 8 months ago #2064 by medyk8ns
Authorisation tries from 94.23.169.106 was created by medyk8ns
Hello,
I've just checked my authorisation.log and found that some strange IP tries to login to my EasyIoT website. Does anybody else have same issue? It looks like somebody(or something) is trying to guess my admin password.
Here are a few lines from log:
11-08-2015-22-01-08 [94.23.169.106]  user:[admin]  authentication failed: authentication failure
11-08-2015-22-01-09 [94.23.169.106]  user:[admin]  authentication failed: authentication failure
11-08-2015-22-01-09 [94.23.169.106]  user:[admin]  authentication failed: authentication failure
11-08-2015-22-01-09 [94.23.169.106]  user:[admin]  authentication failed: authentication failure
11-08-2015-22-01-09 [94.23.169.106]  user:[admin]  authentication failed: authentication failure

Please Log in or Create an account to join the conversation.

8 years 8 months ago #2078 by markusonfire
Replied by markusonfire on topic Authorisation tries from 94.23.169.106
This is to be expected when you expose a commonly used port to the public internet.

If you need to do this, I recommend configuring your nat so that a non-standard port is used for the external access - eg: 2659 instead of 80.
The following user(s) said Thank You: medyk8ns

Please Log in or Create an account to join the conversation.

8 years 8 months ago #2084 by EasyIoT
Replied by EasyIoT on topic Authorisation tries from 94.23.169.106
like @markusonfire says this is usual, when you have port open to public. I recommend you to use fail2ban.
The following user(s) said Thank You: medyk8ns

Please Log in or Create an account to join the conversation.

8 years 8 months ago #2087 by medyk8ns
Replied by medyk8ns on topic Authorisation tries from 94.23.169.106
Ok thank you for the info. Will check fail2ban out.

Please Log in or Create an account to join the conversation.

8 years 8 months ago - 8 years 8 months ago #2093 by medyk8ns
Replied by medyk8ns on topic Authorisation tries from 94.23.169.106
So I've installed fail2ban, and the only problem is that authorisation.log from EasyIoT has wrong timestamp format. So fail2ban is unable to work. How can I change auothorisation.log timestamp format(on RPI)?
Edit: Timestamp in log is fixed in new version, see here

Please Log in or Create an account to join the conversation.

  1. Forum
  3. EasyIoT server
  5. General
  7. Authorisation tries from 94.23.169.106
Time to create page: 0.206 seconds

Forum latest

  • No posts to display.