Subj : Re: Break in attempt
To   : Ward Dossche
From : Wilfred van Velzen
Date : Wed Mar 06 2024 01:48 pm

Hi Ward,

On 2024-03-06 13:36:37, you wrote to All:

 WD> This was funny, someone tried to break into my account

"account"? For what service?

 WD> with thousands and thousands multiple attempts with differing
 WD> passwords ... really interesting to observe ...

Nothing new...

root@ubuntu:/var/log# grep 'Invalid user' auth.log | wc -l
26865

This is for a period of 3,5 days on a public server. They are all ssh login 
attempts with password authentication. Which will never work even if they 
correctly "guessed" a user and password combination. Because only 
authentication with keys is allowed on this server.

I see the same on all public servers I administer.


Bye, Wilfred.

--- FMail-lnx64 2.2.1.1
 * Origin: FMail development HQ (2:280/464)

.