大家帮忙看下，这是服务器被入侵黑了emqx吗？

EMQX
,
1

[2024-05-17 15:33:52] local.DEBUG: MQTT [{host}:{port}] [{clientId}] Connecting to broker. {“host”:“服务器IP”,“port”:1883,“clientId”:“mqtt-test:4971”}
[2024-05-17 15:33:52] local.DEBUG: MQTT [{host}:{port}] [{clientId}] Socket opened and ready to use. {“host”:“服务器IP”,“port”:1883,“clientId”:“mqtt-test:4971”}
[2024-05-17 15:33:52] local.DEBUG: MQTT [{host}:{port}] [{clientId}] Using the [clean session] flag for the connection. {“host”:“服务器IP”,“port”:1883,“clientId”:“mqtt-test:4971”}
[2024-05-17 15:33:52] local.DEBUG: MQTT [{host}:{port}] [{clientId}] Sending connection handshake to broker. {“host”:“服务器IP”,“port”:1883,“clientId”:“mqtt-test:4971”}
[2024-05-17 15:33:52] local.DEBUG: MQTT [{host}:{port}] [{clientId}] Sent data over the socket: {data} {“host”:“服务器IP”,“port”:1883,“clientId”:“mqtt-test:4971”,“data”:“\u0010\u001c\u0000\u0006MQIsdp\u0003\u0002\u0000
\u0000\u000emqtt-test:4971”}
[2024-05-17 15:33:52] local.DEBUG: MQTT [{host}:{port}] [{clientId}] Waiting for {bytes} bytes of data. {“host”:“服务器IP”,“port”:1883,“clientId”:“mqtt-test:4971”,“bytes”:1}
[2024-05-17 15:33:52] local.DEBUG: MQTT [{host}:{port}] [{clientId}] Read data from the socket: {data} {“host”:“服务器IP”,“port”:1883,“clientId”:“mqtt-test:4971”,“data”:" “}
[2024-05-17 15:33:52] local.DEBUG: MQTT [{host}:{port}] [{clientId}] Read data from the socket (without blocking): {data} {“host”:“服务器IP”,“port”:1883,“clientId”:“mqtt-test:4971”,“data”:”\u0002\u0000\u0000"}
[2024-05-17 15:33:52] local.INFO: MQTT [{host}:{port}] [{clientId}] Connection with broker established successfully. {“host”:“服务器IP”,“port”:1883,“clientId”:“mqtt-test:4971”,“errorCode”:“0x00”}
[2024-05-17 15:33:52] local.DEBUG: MQTT [{host}:{port}] [{clientId}] Publishing a message on topic [{topic}]: {message} {“host”:“服务器IP”,“port”:1883,“clientId”:“mqtt-test:4971”,“topic”:“硬件设备的clientid”,“message”:“硬件设备发送的消息”,“qos”:2,“retain”:true,“messageId”:1,“isDuplicate”:false}

2

这个client-id不是我们内部定义链接的同时这个client-id的ip是国外的，应该是开了代理

3

如果mqtt 服务器挂在公网上，被扫描，尝试攻击是常有的事，关键是mqtt server 要鉴权认证连接的客户合法性，不合法则断开。

1 个赞