date:20170815

Re: [Ubnt_users] UBNT list test

2017-08-15 Thread Josh Luthman

Welcome

Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

On Aug 15, 2017 7:31 PM, "Eric Williams SDWISP"  wrote:

> so I have added my self back to the last and this is a test
>
>
> Eric Williams W7EMW
>
> Network Administrator
>
> 619-698-3904 <(619)%20698-3904> Office
>
> *619-922-6001 <(619)%20922-6001> Tech Support Hot Line*
>
> Updated with network trouble or outage message
>
>
>
> 9740 Campo Road #211
>
> Spring Valley Ca 91977
>
>
>
> WWW.SDWISP.COM 
>
> SDWISP Begins Where Fiber Ends
>
>
>
> 4 Day Admin Monday - Thursday 9AM to 5PM {Yes, I’m hard to reach Friday –
> Sunday….Kids!!}
>
> Closed on all U.S., Bank, School and Mexican Holidays due to Social
> Obligations.
>
>
>
>
> ___
> Ubnt_users mailing list
> Ubnt_users@wispa.org
> http://lists.wispa.org/mailman/listinfo/ubnt_users
>
>
___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

Re: [Ubnt_users] Air fiber X Child connection

2017-08-15 Thread Scott

On 2017/8/15 17:50, Roy wrote:
> Dropbear is the SSH server.
> 
> 192.168.11.1  is connecting on port 22 to the radio and then
> disconnecting without trying to authenticate.
> 
> Its a usual sign of network monitoring.


Monitoring SSH every 30 seconds is a bit unusual.  Every 5 minutes or so
would seem to be more reasonable.

Attacks/probes of a router's external IP address via a DMZ or port
forward / dst-nat rule, can come quickly.   I'm not sure if any bots are
trying every 30 seconds or not.

What is 192.168.11.1?  The router?  What brand/model?  Does it have port
forwards or dst-nat rules?



> On 8/15/2017 3:41 PM, Eric Williams SDWISP wrote:
>>
>> Need some help here My AP is 192.168.11.9 and the SU is 11.10 and log
>> is showing Child connection to 11.1 ?
>>
>>  
>>
>> Help as I do not understand the log ?
>>
>>  
>>
>> Thanks.
>>
>>  
>>
>> My link is perfect !
>>
>>  
>>
>>  
>>
>>  
>>
>> System Log
>>
>> Aug 15 14:29:02 sd_wisp: Messages cleared.
>>
>> Aug 15 14:29:31 dropbear[1886]: Child connection from
>> :::192.168.11.1:38284
>>
>> Aug 15 14:29:31 dropbear[1886]: exit before auth: Exited normally
>>
>> Aug 15 14:30:01 dropbear[1938]: Child connection from
>> :::192.168.11.1:38487
>>
>> Aug 15 14:30:01 dropbear[1938]: exit before auth: Exited normally
>>
>> Aug 15 14:30:31 dropbear[2024]: Child connection from
>> :::192.168.11.1:38690
>>
>> Aug 15 14:30:31 dropbear[2024]: exit before auth: Exited normally
>>
>> Aug 15 14:31:01 dropbear[2037]: Child connection from
>> :::192.168.11.1:38893
>>
>> Aug 15 14:31:01 dropbear[2037]: exit before auth: Exited normally
>>
>> Aug 15 14:31:31 dropbear[2050]: Child connection from
>> :::192.168.11.1:39095
>>
>> Aug 15 14:31:31 dropbear[2050]: exit before auth: Exited normally
>>
>> Aug 15 14:32:01 dropbear[2063]: Child connection from
>> :::192.168.11.1:39299
>>
>> Aug 15 14:32:01 dropbear[2063]: exit before auth: Exited normally
>>
>> Aug 15 14:32:31 dropbear[2077]: Child connection from
>> :::192.168.11.1:39502
>>
>> Aug 15 14:32:31 dropbear[2077]: exit before auth: Exited normally
>>
>> Aug 15 14:33:01 dropbear[2090]: Child connection from
>> :::192.168.11.1:39704
>>
>> Aug 15 14:33:01 dropbear[2090]: exit before auth: Exited normally
>>
>> Aug 15 14:33:31 dropbear[2103]: Child connection from
>> :::192.168.11.1:39908
>>
>> Aug 15 14:33:31 dropbear[2103]: exit before auth: Exited normally
>>
>> Aug 15 14:34:01 dropbear[2117]: Child connection from
>> :::192.168.11.1:40110
>>
>> Aug 15 14:34:01 dropbear[2117]: exit before auth: Exited normally
>>
>>  
>>
>>  
>>
>>
>>  
>>
>>  
>>
> 
> 
> 
> ___
> Ubnt_users mailing list
> Ubnt_users@wispa.org
> http://lists.wispa.org/mailman/listinfo/ubnt_users
> 


-- 
Scott Lambert  KC5MLE Unix SysAdmin
lamb...@lambertfam.org
___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

Re: [Ubnt_users] UBNT list test

2017-08-15 Thread Eric Williams SDWISP

Thank you.lol
 
Eric Williams W7EMW

Network Administrator

619-698-3904 Office

619-922-6001 Tech Support Hot Line

Updated with network trouble or outage message

 

9740 Campo Road #211

Spring Valley Ca 91977

 

  WWW.SDWISP.COM 

SDWISP Begins Where Fiber Ends

 

4 Day Admin Monday - Thursday 9AM to 5PM {Yes, I'm hard to reach Friday -
Sunday..Kids!!} 

Closed on all U.S., Bank, School and Mexican Holidays due to Social
Obligations.

 

 

 

 

  _  

From: ubnt_users-boun...@wispa.org [mailto:ubnt_users-boun...@wispa.org] On
Behalf Of Josh Luthman
Sent: Tuesday, August 15, 2017 4:32 PM
To: Ubiquiti Users Group
Subject: Re: [Ubnt_users] UBNT list test


Welcome


Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

On Aug 15, 2017 7:31 PM, "Eric Williams SDWISP"  wrote:



so I have added my self back to the last and this is a test
 
Eric Williams W7EMW

Network Administrator

619-698-3904   Office

619-922-6001   Tech Support Hot Line

Updated with network trouble or outage message

 

9740 Campo Road #211

Spring Valley Ca 91977

 

  WWW.SDWISP.COM 

SDWISP Begins Where Fiber Ends

 

4 Day Admin Monday - Thursday 9AM to 5PM {Yes, I'm hard to reach Friday -
Sunday..Kids!!} 

Closed on all U.S., Bank, School and Mexican Holidays due to Social
Obligations.



 
 

___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/ 
mailman/listinfo/ubnt_users



___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

Re: [Ubnt_users] Air fiber X Child connection

2017-08-15 Thread Roy


  
  
Dropbear is the SSH server.
  
  192.168.11.1  is connecting on port 22 to the radio and then
  disconnecting without trying to authenticate.
  
  Its a usual sign of network monitoring.
  
  
  
  On 8/15/2017 3:41 PM, Eric Williams SDWISP wrote:


  
  
  
  
  
Need some help here My AP is 192.168.11.9
  and the SU is 11.10 and log is showing Child connection to 11.1 ?
 
Help as I do not understand the log ?
 
Thanks.
 
My link is perfect !
 
 
 

  

  

  

  

  System
  Log

  
  

  Aug 15 14:29:02
  sd_wisp: Messages cleared.
  Aug 15 14:29:31
  dropbear[1886]: Child connection from
  :::192.168.11.1:38284
  Aug 15 14:29:31
  dropbear[1886]: exit before auth: Exited
  normally
  Aug 15 14:30:01
  dropbear[1938]: Child connection from
  :::192.168.11.1:38487
  Aug 15 14:30:01
  dropbear[1938]: exit before auth: Exited
  normally
  Aug 15 14:30:31
  dropbear[2024]: Child connection from
  :::192.168.11.1:38690
  Aug 15 14:30:31
  dropbear[2024]: exit before auth: Exited
  normally
  Aug 15 14:31:01
  dropbear[2037]: Child connection from
  :::192.168.11.1:38893
  Aug 15 14:31:01
  dropbear[2037]: exit before auth: Exited
  normally
  Aug 15 14:31:31
  dropbear[2050]: Child connection from
  :::192.168.11.1:39095
  Aug 15 14:31:31
  dropbear[2050]: exit before auth: Exited
  normally
  Aug 15 14:32:01
  dropbear[2063]: Child connection from
  :::192.168.11.1:39299
  Aug 15 14:32:01
  dropbear[2063]: exit before auth: Exited
  normally
  Aug 15 14:32:31
  dropbear[2077]: Child connection from
  :::192.168.11.1:39502
  Aug 15 14:32:31
  dropbear[2077]: exit before auth: Exited
  normally
  Aug 15 14:33:01
  dropbear[2090]: Child connection from
  :::192.168.11.1:39704
  Aug 15 14:33:01
  dropbear[2090]: exit before auth: Exited
  normally
  Aug 15 14:33:31
  dropbear[2103]: Child connection from
  :::192.168.11.1:39908
  Aug 15 14:33:31
  dropbear[2103]: exit before auth: Exited
  normally
  Aug 15 14:34:01
  dropbear[2117]: Child connection from
  :::192.168.11.1:40110
  Aug 15 14:34:01
  dropbear[2117]: exit before auth: Exited
  normally

  

  

  

  

 
 


 
 

  


  

___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

[Ubnt_users] Who do you use for coordination and lic

2017-08-15 Thread Mitch


Thanks

Mitch


On 8/15/2017 6:50 PM, Roy wrote:

Dropbear is the SSH server.

192.168.11.1  is connecting on port 22 to the radio and then 
disconnecting without trying to authenticate.


Its a usual sign of network monitoring.



On 8/15/2017 3:41 PM, Eric Williams SDWISP wrote:


Need some help here My AP is 192.168.11.9 and the SU is 11.10 and log 
is showing Child connection to 11.1 ?


Help as I do not understand the log ?

Thanks.

My link is perfect !

System Log

Aug 15 14:29:02 sd_wisp: Messages cleared.

Aug 15 14:29:31 dropbear[1886]: Child connection from 
:::192.168.11.1:38284


Aug 15 14:29:31 dropbear[1886]: exit before auth: Exited normally

Aug 15 14:30:01 dropbear[1938]: Child connection from 
:::192.168.11.1:38487


Aug 15 14:30:01 dropbear[1938]: exit before auth: Exited normally

Aug 15 14:30:31 dropbear[2024]: Child connection from 
:::192.168.11.1:38690


Aug 15 14:30:31 dropbear[2024]: exit before auth: Exited normally

Aug 15 14:31:01 dropbear[2037]: Child connection from 
:::192.168.11.1:38893


Aug 15 14:31:01 dropbear[2037]: exit before auth: Exited normally

Aug 15 14:31:31 dropbear[2050]: Child connection from 
:::192.168.11.1:39095


Aug 15 14:31:31 dropbear[2050]: exit before auth: Exited normally

Aug 15 14:32:01 dropbear[2063]: Child connection from 
:::192.168.11.1:39299


Aug 15 14:32:01 dropbear[2063]: exit before auth: Exited normally

Aug 15 14:32:31 dropbear[2077]: Child connection from 
:::192.168.11.1:39502


Aug 15 14:32:31 dropbear[2077]: exit before auth: Exited normally

Aug 15 14:33:01 dropbear[2090]: Child connection from 
:::192.168.11.1:39704


Aug 15 14:33:01 dropbear[2090]: exit before auth: Exited normally

Aug 15 14:33:31 dropbear[2103]: Child connection from 
:::192.168.11.1:39908


Aug 15 14:33:31 dropbear[2103]: exit before auth: Exited normally

Aug 15 14:34:01 dropbear[2117]: Child connection from 
:::192.168.11.1:40110


Aug 15 14:34:01 dropbear[2117]: exit before auth: Exited normally







___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users


___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

[Ubnt_users] UBNT list test

2017-08-15 Thread Eric Williams SDWISP

so I have added my self back to the last and this is a test
 
Eric Williams W7EMW

Network Administrator

619-698-3904 Office

619-922-6001 Tech Support Hot Line

Updated with network trouble or outage message

 

9740 Campo Road #211

Spring Valley Ca 91977

 

  WWW.SDWISP.COM 

SDWISP Begins Where Fiber Ends

 

4 Day Admin Monday - Thursday 9AM to 5PM {Yes, I'm hard to reach Friday -
Sunday..Kids!!} 

Closed on all U.S., Bank, School and Mexican Holidays due to Social
Obligations.

 

 
___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

Re: [Ubnt_users] UBNT list test

Re: [Ubnt_users] Air fiber X Child connection

Re: [Ubnt_users] UBNT list test

Re: [Ubnt_users] Air fiber X Child connection

[Ubnt_users] Who do you use for coordination and lic

[Ubnt_users] UBNT list test

6 matches

Site Navigation

Mail list logo

Footer information