Happens on all internet-facing ssh daemons. Independently of tor.
On 3/31/21 6:35 PM, Cristiano Kubiaki Gomes wrote: > Hi there, > O noticed many ssh requests to my Debian VM running a Relay and I am > wondering if this is normal or if this is happening only with me. > > Anyone else see this ssh attemptives? Is it normal? > > sshd[27004]: Failed password for root from 45.91.226.235 port 41012 ssh2 > sshd[27004]: Received disconnect from 45.91.226.235 port 41012:11: Bye > Bye [preauth] > sshd[27004]: Disconnected from authenticating user root 45.91.226.235 > port 41012 [preauth] > sshd[27006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 > euid=0 tty=ssh ruser= rhost=108.36.253.227 user=root > > It's many different ips and trying to access in many different ports. > > Thank you! > > _______________________________________________ > tor-relays mailing list > tor-relays@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
