[tor-relays] Botnet targeting Tor relays

[Marco Predicatori]

anon at kai.sx wrote on 10/17/24 10:40:
> Hello,
> 
> I run several Linux root servers, spread over several providers, some of which 
> serve as Tor relays. For a few weeks now I have been observing massive brute 
> force attempts via SSH from hundreds of sources around the world. However, only 
> the Tor relays are affected, the rest of the servers are not.
> 
> Are other relay operators also observing something like this? Is there currently 
> a botnet targeting Tor relays?

Yes, since the dawn of times. My firewalll blocks any connection to port 22.


-- 
Marco
https://nusenu.github.io/OrNetStats/w/relay/A4E74410D83705EEFF24BC265DE2B2FF39BDA56E.html