K2P更新了灯大的老毛子，居然刚刷机就被攻击？

jungleshi

本人校园网用户，一直用的高恪，今天刷了老毛子，发现
现在已经开了防火墙，没有消息了，不会已经被中马了吧？？？

May 29 00:53:19 dropbear[796]: Child connection from 5.188.86.165:32677
May 29 00:53:20 dropbear[797]: Child connection from 5.188.86.214:46064
May 29 00:53:20 dropbear[798]: Child connection from 103.1.173.103:59686
May 29 00:53:21 dropbear[796]: Password auth succeeded for 'admin' from 5.188.86.165:32677
May 29 00:53:21 dropbear[797]: Password auth succeeded for 'admin' from 5.188.86.214:46064
May 29 00:53:22 dropbear[796]: Exit (admin): Exited normally
May 29 00:53:22 dropbear[797]: Exit (admin): Exited normally
May 29 00:53:25 dropbear[798]: Login attempt for nonexistent user from 103.1.173.103:59686
May 29 00:53:27 dropbear[798]: Exit before auth: Disconnect received
May 29 00:53:28 dropbear[799]: Child connection from 103.1.173.103:36244
May 29 00:53:34 dropbear[800]: Child connection from 5.188.86.209:44520
May 29 00:53:35 dropbear[801]: Child connection from 103.1.173.103:40780
May 29 00:53:36 dropbear[800]: Password auth succeeded for 'admin' from 5.188.86.209:44520
May 29 00:53:37 dropbear[799]: Login attempt for nonexistent user from 103.1.173.103:36244
May 29 00:53:37 dropbear[800]: Exit (admin): Exited normally
May 29 00:53:38 dropbear[799]: Exit before auth: Disconnect received
May 29 00:53:41 dropbear[802]: Child connection from 5.188.86.165:34694
May 29 00:53:42 dropbear[802]: Password auth succeeded for 'admin' from 5.188.86.165:34694
May 29 00:53:43 dropbear[803]: Child connection from 103.1.173.103:45478
May 29 00:53:46 dropbear[804]: Child connection from 5.188.86.209:45712
May 29 00:53:48 dropbear[804]: Password auth succeeded for 'admin' from 5.188.86.209:45712
May 29 00:53:48 dropbear[801]: Login attempt for nonexistent user from 103.1.173.103:40780
May 29 00:53:49 dropbear[801]: Exit before auth: Disconnect received
May 29 00:53:50 dropbear[805]: Child connection from 103.1.173.103:50686
May 29 00:53:55 dropbear[803]: Login attempt for nonexistent user from 103.1.173.103:45478
May 29 00:53:55 dropbear[803]: Exit before auth: Disconnect received
May 29 00:53:57 dropbear[805]: Login attempt for nonexistent user from 103.1.173.103:50686
May 29 00:53:59 dropbear[806]: Child connection from 103.1.173.103:55768
May 29 00:54:00 dropbear[805]: Exit before auth: Disconnect received
May 29 00:54:06 dropbear[806]: Login attempt for nonexistent user from 103.1.173.103:55768
May 29 00:54:06 dropbear[806]: Exit before auth: Disconnect received

yifazhi

这不算吧！应该不是固件的锅吧

zxc14236

默认密码不改，就关闭防火墙，你牛。看上去成功登录几次，至于干啥了不知道

samyi

用的默认登录密码，安全意识有待提升啊