Can incessant attacks on my wisp radio in Santa Cruz Mts bedropping service?

Discussion in 'Wireless Internet' started by Danny D., Feb 23, 2013.

  1. Danny D.

    Danny D. Guest

    Daily I see in my Ubiquiti AirOS log multiple attacks on SSH port 22.

    I also see periodic dropouts of the network, but they're not correlated
    1:1 with those attacks so I had never put two and two together.

    However, yesterday I turned off access to SSH on my rooftop radio,
    and my signal for the past 24 hours has been super clean.

    Here's the signal before I turned off access to port 22:
    (the red areas are pings that never returned, the blue is ping time0
    (the x-axis is in reverse time, e.g., 3pm, 2pm, 1pm, etc. moving right)
    http://www2.picturepush.com/photo/a/12256835/img/12256835.gif

    Here is the signal AFTER I turned off access to port 22:
    http://www4.picturepush.com/photo/a/12256837/img/12256837.jpg

    The difference is so astounding, that I wonder IF the little computer
    inside the radio was getting hammered by the attacks, which perhaps
    weren't even showing up on the log file???

    Could that be?
     
    Danny D., Feb 23, 2013
    #1
    1. Advertisements

  2. Danny D.

    Danny D. Guest

    Danny D., Feb 23, 2013
    #2
    1. Advertisements

  3. Danny D.

    Danny D. Guest

    Turning off SSH solved the problem!

    For the past few days, I've been graphing the dropouts and the signal has
    been clear.

    So, it seems that leaving SSH enabled on a rooftop radio when you
    have a static IP address is folly because brute force attacks will
    eventually knock you off the net.
     
    Danny D., Feb 27, 2013
    #3
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.