3 ms·
You shouldn't be amazed. Assume that any available service will be probed continuously. There's no harm in that. Sure the log noise can be annoying but be in p
by jjav 5y ago
You shouldn't be amazed. Assume that any available service will be probed continuously.
There's no harm in that. Sure the log noise can be annoying but be in peace with it.
If there are no weak credentials which can allow access, there's no issue.
The "if" is important, but tractable.
- patrakov 5y agoThere _is_ harm. At one of the places where I worked previously, we used a few dedicated servers in different cities, and periodically synchronized data from the central one to all others using rsync-over-ssh. Sometimes we got a warning from rsync that the connection was unexpectedly closed. We have traced this warning to SSH credential bruteforcers (yes, completely futile) that exhausted MaxStartups. So, we installed fail2ban.
- BenjiWiebe 5y agoI've ran into this myself. I couldn't ssh into my server until I disconnected the router (home server, and I was in the LAN). Turns out it was an extreme case of ssh bruteforce attempts that maxed out connection count or maxstartups or something like that. Don't remember exactly which resource was the bottleneck.