4 ms·
Even for regular IPv4s you often get upwards of 20-40k SSH probes per day trying common passwords against root. IPv6 largely makes this go away since it's too b
by api 9y ago
Even for regular IPv4s you often get upwards of 20-40k SSH probes per day trying common passwords against root. IPv6 largely makes this go away since it's too big to brute force scan.
- walrus01 9y agoYes, but the volume in kbps is tiny.
- tzs 9y ago> Even for regular IPv4s you often get upwards of 20-40k SSH probes per day trying common passwords against root So...anyone here ever set up a throwaway machine with root ssh enabled with one of those common passwords, so that some of those could get in, so you could see what they actually try to do once they are in? If so, what did you see?
- adrianpike 9y agoYes, this is a pretty common practice. Take a look at the Honeypot wikipedia page and enjoy the rabbit hole. :)
- ChuckMcM 9y agoYes. And a lot of script kiddies (people who were just using easily acquired scripts to attempt to break into hosts). Looking at the sequence of password hashes you could tell some of these scripts were just fed the 'most popular password' list and were working their way down the list.
- ericfrederich 9y agoThis is called a Honeypot. https://www.youtube.com/results?search_query=ssh+honeypot https://www.youtube.com/results?search_query=ssh+honeypot