貌似被攻击了，有什么好的办法规避吗？

baby***

H大的老毛子作为二级路由是DMZ， SSH开着， 这个默认是在WAN口监听的吗？
有没有办法只允许LAN口的访问，不允许WAN口？
Jan 21 19:53:33 dropbear[28464]: Exit before auth: Disconnect received
Jan 21 19:53:34 dropbear[28506]: Child connection from 103.99.0.122:63230
Jan 21 19:53:38 dropbear[28506]: Login attempt for nonexistent user from 103.99.0.122:63230
Jan 21 19:53:39 dropbear[28506]: Exit before auth: Disconnect received
Jan 21 19:53:39 dropbear[28522]: Child connection from 103.99.0.122:50038
Jan 21 19:53:44 dropbear[28522]: Login attempt for nonexistent user from 103.99.0.122:50038
Jan 21 19:53:45 dropbear[28522]: Exit before auth: Disconnect received
Jan 21 19:53:45 dropbear[28547]: Child connection from 103.99.0.122:62474
Jan 21 19:53:50 dropbear[28547]: Login attempt for nonexistent user from 103.99.0.122:62474
Jan 21 19:53:50 dropbear[28547]: Exit before auth: Disconnect received
Jan 21 19:53:51 dropbear[28548]: Child connection from 103.99.0.122:53027
Jan 21 19:53:55 dropbear[28548]: Login attempt for nonexistent user from 103.99.0.122:53027
Jan 21 19:53:55 dropbear[28548]: Exit before auth: Disconnect received
Jan 21 19:53:55 dropbear[28566]: Child connection from 103.99.0.122:55622
Jan 21 19:53:59 dropbear[28566]: Login attempt for nonexistent user from 103.99.0.122:55622
Jan 21 19:54:00 dropbear[28566]: Exit before auth: Disconnect received
Jan 21 19:54:00 dropbear[28567]: Child connection from 103.99.0.122:58714
Jan 21 19:54:04 dropbear[28567]: Login attempt for nonexistent user from 103.99.0.122:58714
Jan 21 19:54:05 dropbear[28567]: Exit before auth: Disconnect received
Jan 21 20:04:48 dropbear[30273]: Child connection from 51.15.199.242:36482
Jan 21 20:04:51 dropbear[30273]: Login attempt for nonexistent user from 51.15.199.242:36482
Jan 21 20:04:51 dropbear[30273]: Exit before auth: Disconnect received
Jan 21 20:04:51 dropbear[30274]: Child connection from 51.15.199.242:42774
Jan 21 20:04:54 dropbear[30274]: Login attempt for nonexistent user from 51.15.199.242:42774
Jan 21 20:04:55 dropbear[30274]: Exit before auth: Disconnect received
Jan 21 20:04:55 dropbear[30292]: Child connection from 51.15.199.242:48448
Jan 21 20:04:59 dropbear[30292]: Login attempt for nonexistent user from 51.15.199.242:48448
Jan 21 20:04:59 dropbear[30292]: Exit before auth: Disconnect received
Jan 21 20:05:00 dropbear[30293]: Child connection from 51.15.199.242:55460
Jan 21 20:05:03 dropbear[30293]: Bad password attempt for 'admin' from 51.15.199.242:55460
Jan 21 20:05:04 dropbear[30293]: Exit before auth (user 'admin', 1 fails): Disconnect received
Jan 21 20:05:04 dropbear[30350]: Child connection from 51.15.199.242:34738
Jan 21 20:05:07 dropbear[30350]: Bad password attempt for 'admin' from 51.15.199.242:34738
Jan 21 20:05:08 dropbear[30350]: Exit before auth (user 'admin', 1 fails): Disconnect received
Jan 21 20:05:08 dropbear[30351]: Child connection from 51.15.199.242:42160
Jan 21 20:05:11 dropbear[30351]: Bad password attempt for 'admin' from 51.15.199.242:42160
Jan 21 20:05:12 dropbear[30351]: Exit before auth (user 'admin', 1 fails): Disconnect received
Jan 21 20:05:12 dropbear[30369]: Child connection from 51.15.199.242:49728
Jan 21 20:05:15 dropbear[30369]: Bad password attempt for 'admin' from 51.15.199.242:49728
Jan 21 20:05:16 dropbear[30369]: Exit before auth (user 'admin', 1 fails): Disconnect received
Jan 21 20:05:16 dropbear[30377]: Child connection from 51.15.199.242:58230
Jan 21 20:05:19 dropbear[30377]: Login attempt for nonexistent user from 51.15.199.242:58230
Jan 21 20:05:20 dropbear[30377]: Exit before auth: Disconnect received
Jan 21 20:16:48 dropbear[32185]: Child connection from 115.159.88.205:36712
Jan 21 20:16:52 dropbear[32185]: Login attempt for nonexistent user from 115.159.88.205:36712
Jan 21 20:16:52 dropbear[32185]: Exit before auth: Exited normally
Jan 21 20:26:15 dropbear[1348]: Child connection from 192.168.123.184:11457
Jan 21 20:26:18 dropbear[1348]: Password auth succeeded for 'admin' from 192.168.123.184:11457

cay***

防火墙或者改端口，推荐改端口

baby***

cayxxx 发表于 2018-1-21 21:35
防火墙或者改端口，推荐改端口

老毛子可以改端口吗？ 防火墙如何配置

qgt***

还有一个办法，改密钥登录，生成个密钥对，公钥复制到系统管理里，私钥自己保存。

baby***

qgtxqj 发表于 2018-1-21 22:14
还有一个办法，改密钥登录，生成个密钥对，公钥复制到系统管理里，私钥自己保存。

嗯 好的 谢谢你