1

I was looking at the log for Sagemcom Gigaset SX686 device and noticed repeated entries that look like this:

Jun  2 14:25:47 War <EVENT> scm: 048-00-00  Unknown user tried to connect via SSH
Jun  2 14:25:49 War <EVENT> scm: 048-00-00  Wrong password for user root
Jun  2 14:25:51 War <EVENT> scm: 048-00-00  Wrong password for user root
Jun  2 14:25:54 War <EVENT> scm: 048-00-00  Wrong password for user root
Jun  2 14:25:56 War <EVENT> scm: 048-00-00  Wrong password for user root

What does it mean and should I be concerned?

Note that I have setup Mac address filtering on the device and whitelisted only two mac addresses. Nothing is connected to ethernet ports.

1 Answer 1

1

You have a valid ip address (internet or interanet) on your wimax device. someone from outside is trying access to your device for some reason. you must:

1- change your default admin access ports like 80,443,22

2-keep your device firmware up to date.

3-use a complex password and change your admin username if is possible.

4-block outside incoming requests with firewall on your wimax device.

2
  • So it these are coming from the internet side? Jun 2, 2019 at 19:23
  • Based on information that you provided to us, yes. Jun 2, 2019 at 19:44

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .