Spencer Myers
Dabbler
- Joined
- Sep 30, 2016
- Messages
- 20
So I didn't realize this until today, that there was a lovely check box in the System tab to view console in the footer. I enabled that today and to my surprise, I found these logs. See below.
Am I under continuous brute force attacks from the outside world? Any tutorials or suggestions to lock this situation down would be much appreciated.
Some thoughts on how I'd like to fix this but am not sure what steps to take to accomplish the tasks:
1.) I have a VPN setup currently thru my router, however I'm not sure how to configure FreeNas to only talk to IP addresses connected to those ONLY on VPN to ensure it's only me logging into my server.
2.) Using WebGUI from HTTPS. I'm not sure how to get a certificate or what the correct settings would be under the System > General tab to get this setup. I don't want to be perma-locked out of my webgui because I futzed with the settings and did something wrong.
For the time being I've completely disabled SSH until I can resolve this issue. Again, any help would be appreciated.
Am I under continuous brute force attacks from the outside world? Any tutorials or suggestions to lock this situation down would be much appreciated.
Some thoughts on how I'd like to fix this but am not sure what steps to take to accomplish the tasks:
1.) I have a VPN setup currently thru my router, however I'm not sure how to configure FreeNas to only talk to IP addresses connected to those ONLY on VPN to ensure it's only me logging into my server.
2.) Using WebGUI from HTTPS. I'm not sure how to get a certificate or what the correct settings would be under the System > General tab to get this setup. I don't want to be perma-locked out of my webgui because I futzed with the settings and did something wrong.
For the time being I've completely disabled SSH until I can resolve this issue. Again, any help would be appreciated.
Code:
Jul 21 00:00:00 freenas newsyslog[54318]: logfile turned over due to size>200K Jul 22 00:00:01 freenas ZFS: vdev state changed, pool_guid=14520774254038799467 vdev_guid=503758825513657184 Jul 22 00:00:01 freenas ZFS: vdev state changed, pool_guid=14520774254038799467 vdev_guid=3218529495698743335 Jul 22 00:00:01 freenas ZFS: vdev state changed, pool_guid=14520774254038799467 vdev_guid=197141286211177849 Jul 22 00:00:01 freenas ZFS: vdev state changed, pool_guid=14520774254038799467 vdev_guid=3321073886247086411 Jul 22 00:00:01 freenas ZFS: vdev state changed, pool_guid=14520774254038799467 vdev_guid=13992846444702071827 Jul 22 00:00:01 freenas ZFS: vdev state changed, pool_guid=14520774254038799467 vdev_guid=1833904788243431590 Jul 22 00:00:01 freenas ZFS: vdev state changed, pool_guid=14520774254038799467 vdev_guid=3231283499703123843 Jul 22 00:00:01 freenas ZFS: vdev state changed, pool_guid=14520774254038799467 vdev_guid=8106182512865105999 Jul 22 00:00:02 freenas ZFS: vdev state changed, pool_guid=14520774254038799467 vdev_guid=14958621945644565224 Jul 22 06:12:13 freenas sshd[93017]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 49921 ssh2 [preauth] Jul 22 06:12:29 freenas sshd[93077]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 53854 ssh2 [preauth] Jul 22 06:12:38 freenas sshd[93084]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 57290 ssh2 [preauth] Jul 22 06:12:48 freenas sshd[93086]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 58731 ssh2 [preauth] Jul 22 06:12:57 freenas sshd[93088]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 60352 ssh2 [preauth] Jul 22 06:13:22 freenas sshd[93198]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 4406 ssh2 [preauth] Jul 22 06:13:43 freenas sshd[93227]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 7123 ssh2 [preauth] Jul 22 06:13:59 freenas sshd[93234]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 8379 ssh2 [preauth] Jul 22 06:14:23 freenas sshd[93311]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 11915 ssh2 [preauth] Jul 22 06:14:38 freenas sshd[93313]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 13392 ssh2 [preauth] Jul 22 06:14:50 freenas sshd[93340]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 14904 ssh2 [preauth] Jul 22 06:15:05 freenas sshd[93357]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 16049 ssh2 [preauth] Jul 22 06:15:14 freenas sshd[93439]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 17784 ssh2 [preauth] Jul 22 06:15:27 freenas sshd[93441]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 18631 ssh2 [preauth] Jul 22 06:15:37 freenas sshd[93443]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 19971 ssh2 [preauth] Jul 22 06:15:49 freenas sshd[93450]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 20927 ssh2 [preauth] Jul 22 06:16:01 freenas sshd[93452]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 22180 ssh2 [preauth] Jul 22 06:16:23 freenas sshd[93529]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 24374 ssh2 [preauth] Jul 22 06:16:42 freenas sshd[93531]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 26104 ssh2 [preauth] Jul 22 06:17:03 freenas sshd[93550]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 28134 ssh2 [preauth] Jul 22 06:17:16 freenas sshd[93610]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 28820 ssh2 [preauth] Jul 22 06:18:04 freenas sshd[93619]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 32127 ssh2 [preauth] Jul 22 06:18:15 freenas sshd[93702]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 33648 ssh2 [preauth] Jul 22 06:18:22 freenas sshd[93755]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 34419 ssh2 [preauth] Jul 22 06:18:31 freenas sshd[93757]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 34974 ssh2 [preauth] Jul 22 06:18:39 freenas sshd[93759]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 35594 ssh2 [preauth] Jul 22 06:19:15 freenas sshd[93836]: error: maximum authentication attempts exceeded for root from 112.85.42.148 port 37697 ssh2 [preauth] Jul 22 08:27:53 freenas sshd[8561]: error: maximum authentication attempts exceeded for admin from 185.143.222.6 port 51340 ssh2 [preauth] Jul 22 08:28:04 freenas sshd[8617]: error: maximum authentication attempts exceeded for admin from 185.143.222.6 port 60897 ssh2 [preauth] Jul 22 08:28:15 freenas sshd[8626]: error: maximum authentication attempts exceeded for admin from 185.143.222.6 port 49230 ssh2 [preauth] Jul 22 08:28:42 freenas sshd[8704]: error: maximum authentication attempts exceeded for admin from 185.143.222.6 port 49231 ssh2 [preauth] Jul 22 08:28:43 freenas sshd[8706]: error: maximum authentication attempts exceeded for invalid user RPM from 185.143.222.7 port 49938 ssh2 [preauth] Jul 22 08:28:56 freenas sshd[8710]: error: maximum authentication attempts exceeded for invalid user service from 185.143.222.6 port 58702 ssh2 [preauth] Jul 22 08:29:31 freenas sshd[8781]: error: maximum authentication attempts exceeded for invalid user service from 185.143.222.6 port 58709 ssh2 [preauth] Jul 22 08:29:38 freenas sshd[8808]: error: maximum authentication attempts exceeded for invalid user service from 185.143.222.6 port 64766 ssh2 [preauth] Jul 22 08:29:43 freenas sshd[8810]: error: maximum authentication attempts exceeded for invalid user RPM from 185.143.222.7 port 64874 ssh2 [preauth] Jul 22 08:29:45 freenas sshd[8812]: error: maximum authentication attempts exceeded for invalid user service from 185.143.222.6 port 64767 ssh2 [preauth]
Last edited: