[tor-relays] Botnet targeting Tor relays

[anon at kai.sx]

Hello,

I run several Linux root servers, spread over several providers, some of which serve as Tor relays. For a few weeks now I have been observing massive brute force attempts via SSH from hundreds of sources around the world. However, only the Tor relays are affected, the rest of the servers are not.

Are other relay operators also observing something like this? Is there currently a botnet targeting Tor relays?

Best,
  Kai.