Move SSH from port 22
Certificate only, deny passwords gets rid of most of this from the kiddies
From: tor-relays tor-relays-bounces@lists.torproject.org On Behalf Of Cristiano Kubiaki Gomes Sent: 31 March 2021 17:36 To: tor-relays@lists.torproject.org Subject: [tor-relays] Many SSH requests
Hi there,
O noticed many ssh requests to my Debian VM running a Relay and I am wondering if this is normal or if this is happening only with me.
Anyone else see this ssh attemptives? Is it normal?
sshd[27004]: Failed password for root from 45.91.226.235 port 41012 ssh2 sshd[27004]: Received disconnect from 45.91.226.235 port 41012:11: Bye Bye [preauth] sshd[27004]: Disconnected from authenticating user root 45.91.226.235 port 41012 [preauth]
sshd[27006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.36.253.227 user=root
It's many different ips and trying to access in many different ports.
Thank you!