On 31.03.2021 18:35, Cristiano Kubiaki Gomes wrote:
Hi there, O noticed many ssh requests to my Debian VM running a Relay and I am wondering if this is normal or if this is happening only with me.
Anyone else see this ssh attemptives? Is it normal?
Yes.
sshd[27004]: Failed password for root from 45.91.226.235 port 41012 ssh2
Disable root login! (First: "adduser UserName")
sshd[27004]: Received disconnect from 45.91.226.235 port 41012:11: Bye Bye [preauth] sshd[27004]: Disconnected from authenticating user root 45.91.226.235 port 41012 [preauth] sshd[27006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.36.253.227 user=root
Disable password login! Use SSH-Key Auth.
https://docs.ovh.com/gb/en/vps/tips-for-securing-a-vps/
tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays