3 ms·
Brute force password-guessing attempts on SSH
- willvarfar 15y agospeculation: standard trojan login?
- pavel_lishin 15y agoGoogling for "dark" and "ManualulIngineruluiMecanic" shows a lot of user/password pairs. I'm guessing something is just going off of a list of previously leaked usernames/passwords.
- gvb 15y agoThis has been going on for years. Idiots. To reduce the annoyance, you can use fail2ban or run ssh on a non-standard port. From 2007: http://www.techrepublic.com/blog/security/protect-ssh-from-brute-force-password-cracking-attacks/349 http://www.techrepublic.com/blog/security/protect-ssh-from-b... http://lwn.net/Articles/255651/ http://lwn.net/Articles/255651/
- kbuck 15y agoIt's even easier to just disable password authentication. SSH agent forwarding makes public key authentication even more convenient.