WEB interface client bots ?

[blagynchy]

пичаги я ми припомнете защо се опитват тази ип-та по -долу да се вържат кам уеба на оскама

2012/01/16 20:52:58 100D3610 p socket open for cccam fd=14
2012/01/16 20:52:58 100D3610 p connect succesfull cccam fd=14
2012/01/16 20:52:58 100D3610 p proxy remote initialized (server=........)
2012/01/16 20:53:00 100D1E20 h unauthorized access from 213.5.74.141 flag 1
2012/01/16 20:53:09 100D1E20 h unauthorized access from 77.123.247.252 flag 1
2012/01/16 20:53:14 100D1E20 h unauthorized access from 94.228.201.42 flag 1
2012/01/16 20:53:19 100DE6A0 c encrypted cccam-client 192.168.1.3 granted (core, au=auto (1 reader))
2012/01/16 20:53:20 100D1E20 h unauthorized access from 94.142.30.45 flag 1
2012/01/16 20:53:22 100D1E20 h unauthorized access from 200.90.236.102 flag 1
2012/01/16 20:53:22 100DE6A0 c starting thread housekeeping lb stats
2012/01/16 20:53:22 100DE6A0 c housekeeping lb stats thread started
2012/01/16 20:53:22 100DE6A0 c core (5581&000000/03EF/4F:189B): found (52 ms) by remote
2012/01/16 20:53:22 100DE6A0 c core (5581&000000/03EF/4F:189B): cache1 (0 ms) by remote
2012/01/16 20:53:24 100D1E20 h unauthorized access from 31.162.107.217 flag 1
2012/01/16 20:53:29 100D1E20 h unauthorized access from 2.94.33.65 flag 1
2012/01/16 20:53:29 100D1E20 h unauthorized access from 62.192.231.5 flag 1
2012/01/16 20:53:31 100DE6A0 c core (5581&000000/03EF/4F:48EB): found (114 ms) by remote
2012/01/16 20:53:36 100D1E20 h unauthorized access from 178.219.92.65 flag 1
2012/01/16 20:53:43 100D1E20 h unauthorized access from 95.78.130.197 flag 1
2012/01/16 20:53:44 100DE6A0 c core (5581&000000/03EF/4F:36A2): found (112 ms) by remote
2012/01/16 20:53:45 100D1E20 h unauthorized access from 95.215.254.68 flag 1
2012/01/16 20:53:57 100DE6A0 c core (5581&000000/03EF/4F:6429): found (202 ms) by remote
2012/01/16 20:54:01 100D1E20 h unauthorized access from 213.5.74.141 flag 1
2012/01/16 20:54:10 100DE6A0 c core (5581&000000/03EF/4F:A7EA): found (324 ms) by remote
2012/01/16 20:54:24 100DE6A0 c core (5581&000000/03EF/4F:B90B): found (203 ms) by remote
2012/01/16 20:54:25 100D1E20 h unauthorized access from 200.90.236.102 flag 1
2012/01/16 20:54:27 100D1E20 h unauthorized access from 94.228.201.42 flag 1
2012/01/16 20:54:30 100D1E20 h unauthorized access from 94.142.30.45 flag 1
2012/01/16 20:54:31 100D1E20 h unauthorized access from 62.192.231.5 flag 1
2012/01/16 20:54:32 100D1E20 h unauthorized access from 31.162.107.217 flag 1
2012/01/16 20:54:33 100DE6A0 c core (5581&000000/03F4/4F:E6DC): found (112 ms) by remote
2012/01/16 20:54:37 100D1E20 h unauthorized access from 178.219.92.65 flag 1
2012/01/16 20:54:37 100DE6A0 c core (5581&000000/03F4/4F:EA67): found (309 ms) by remote
2012/01/16 20:54:37 100DE6A0 c core (5581&000000/03EF/4F:2AC1): found (123 ms) by remote
2012/01/16 20:54:50 100DE6A0 c core (5581&000000/03EF/4F:0B5B): found (205 ms) by remote
2012/01/16 20:55:02 100D1E20 h unauthorized access from 91.207.42.26 flag 1
2012/01/16 20:55:02 100DE6A0 c core (5581&000000/03EF/4F:31CD): found (115 ms) by remote
2012/01/16 20:55:05 100D1E20 h unauthorized access from 46.73.158.146 flag 1
2012/01/16 20:55:16 100DE6A0 c core (5581&000000/03EF/4F:E301): found (335 ms) by remote
2012/01/16 20:55:26 100D1E20 h unauthorized access from 94.137.45.220 flag 1
2012/01/16 20:55:29 100DE6A0 c core (5581&000000/03EF/4F:2377): found (187 ms) by remote
2012/01/16 20:55:41 100D1E20 h unauthorized access from 2.94.33.65 flag 1
2012/01/16 20:55:41 100DE6A0 c core (5581&000000/03EF/4F:2D11): found (110 ms) by remote
2012/01/16 20:55:44 100D1E20 h unauthorized access from 89.239.160.219 flag 1
2012/01/16 20:55:47 100D1E20 h unauthorized access from 93.159.243.51 flag 1
2012/01/16 20:55:54 100DE6A0 c core (5581&000000/03EF/4F:4240): found (110 ms) by remote

ако никой не знае бия си един блок на 8888 в /за тези които не схащат - iptables -A INPUT -i \!$WAN -p tcp -dproto 8888 -j ACCEPT /таблицата и да работи само локал -- но странното е че ми преличат на ботове някакви

[turbopower]

Сложи този ред в конфига като опишеш кои ип адреси само искаш да имат достъп. Също си смени и порта с някой над 10000. Мисля че така ще си решиш проблемите. 8888 е масов порт за това знаят къде да те атакуват.

httpallowed = 127.0.0.1,192.168.0.0-192.168.255.255

[blagynchy]

този ред си го има.. резнах го , стана само локал и всичко си е наред :))