[tor-relays] Many SSH requests

[gerard at bulger.co.uk]

Move SSH from port 22

Certificate only, deny passwords gets rid of most of this from the kiddies

 

 

From: tor-relays <tor-relays-bounces at lists.torproject.org> On Behalf Of Cristiano Kubiaki Gomes
Sent: 31 March 2021 17:36
To: tor-relays at lists.torproject.org
Subject: [tor-relays] Many SSH requests

 

Hi there,

O noticed many ssh requests to my Debian VM running a Relay and I am wondering if this is normal or if this is happening only with me.

 

Anyone else see this ssh attemptives? Is it normal?

 

sshd[27004]: Failed password for root from 45.91.226.235 port 41012 ssh2
sshd[27004]: Received disconnect from 45.91.226.235 port 41012:11: Bye Bye [preauth]
sshd[27004]: Disconnected from authenticating user root 45.91.226.235 port 41012 [preauth]

sshd[27006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.36.253.227  user=root

 

It's many different ips and trying to access in many different ports.

 

Thank you!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20210401/0d9dc493/attachment.htm>