[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-relays] SSH brute force attempts to connect to my Middle Relay IP address

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: [tor-relays] SSH brute force attempts to connect to my Middle Relay IP address
From: Fr33d0m4all <fr33d0m4all@xxxxxxxxxx>
Date: Wed, 4 Oct 2017 08:02:55 +0200
Delivered-to: archiver@xxxxxxxx
Delivery-date: Wed, 04 Oct 2017 02:03:14 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak; t=1507096979; bh=v4PKgOsxGj30RyEJWJiPlkLnSHHmESqPhm5XxNwtXqo=; h=From:Date:Subject:To:From; b=ng3xjS/4An7tICd0GU1y3PuQ92dyUtyBIhpTuLAQFeTdtFkJ8kKe8k38Ud8YzzbhL V3oNecpiHNX/ge41iMgg1ci3ANFGxUDgDnJi+xr4QQ9gXCuMZyVsHwx3bReoAhTYBy LubXsrxI3t6q3f5PWxvLadvT5kFettEificVCpL8=
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

Hi,
My Tor middle relay public IP address is victim of SSH brute force connections’ attempts and the attack is going on since two weeks ago. It’s not a problem, the server that is listening with SSH on the same IP address than my Tor relay blocks the connections and bans the IP addresses (with Fail2Ban) but I just wanted to know if there is some campaign of attacks carried against Tor relays.. are you experiencing the same? The attacks are carried on with a botnet given the large amount of different IP addresses that I see in the logs.

Best regards,
   Fr33d0m4All
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Follow-Ups:
- Re: [tor-relays] SSH brute force attempts to connect to my Middle Relay IP address
  - From: Gareth Llewellyn
- Re: [tor-relays] SSH brute force attempts to connect to my Middle Relay IP address
  - From: Igor Mitrofanov
- Re: [tor-relays] SSH brute force attempts to connect to my Middle Relay IP address
  - From: Robin
- Re: [tor-relays] SSH brute force attempts to connect to my Middle Relay IP address
  - From: Sean Greenslade

Prev by Author: [tor-relays] stability of "Sandbox" feature
Next by Author: Re: [tor-relays] SSH brute force attempts to connect to my Middle Relay IP address
Previous by thread: Re: [tor-relays] SSH Bruteforce Attempts
Next by thread: Re: [tor-relays] SSH brute force attempts to connect to my Middle Relay IP address
Index(es):
- Author
- Thread