Re: [tor-relays] Botnet targeting Tor relays

anon@kai.sx wrote on 10/17/24 10:40:

Hello,

I run several Linux root servers, spread over several providers, some of which serve as Tor relays. For a few weeks now I have been observing massive brute force attempts via SSH from hundreds of sources around the world. However, only the Tor relays are affected, the rest of the servers are not.

Are other relay operators also observing something like this? Is there currently a botnet targeting Tor relays?

Yes, since the dawn of times. My firewalll blocks any connection to port 22.