[tor-relays] Many SSH requests

[Random Tor Node Operator]

Happens on all internet-facing ssh daemons.
Independently of tor.


On 3/31/21 6:35 PM, Cristiano Kubiaki Gomes wrote:
> Hi there,
> O noticed many ssh requests to my Debian VM running a Relay and I am
> wondering if this is normal or if this is happening only with me.
>
> Anyone else see this ssh attemptives? Is it normal?
>
> sshd[27004]: Failed password for root from 45.91.226.235 port 41012 ssh2
> sshd[27004]: Received disconnect from 45.91.226.235 port 41012:11: Bye
> Bye [preauth]
> sshd[27004]: Disconnected from authenticating user root 45.91.226.235
> port 41012 [preauth]
> sshd[27006]: pam_unix(sshd:auth): authentication failure; logname= uid=0
> euid=0 tty=ssh ruser= rhost=108.36.253.227  user=root
>
> It's many different ips and trying to access in many different ports.
>
> Thank you!
>
> _______________________________________________
> tor-relays mailing list
> tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>