Path: csiph.com!news.mixmin.net!eternal-september.org!reader01.eternal-september.org!.POSTED!not-for-mail
From: Andreas Kohlbach <ank@spamfence.net>
Newsgroups: comp.os.linux.misc
Subject: Re: Is It Time To Replace SSH ???
Date: Fri, 23 Dec 2022 23:26:19 -0500
Organization: A noiseless patient Spider
Lines: 33
Message-ID: <87a63dpgus.fsf@usenet.ankman.de>
References: <y-ycndVmEZmnWQf-nZ2dnZfqn_WdnZ2d@earthlink.com> <tnfk1k$344am$3@dont-email.me> <87r0x0xmre.fsf@usenet.ankman.de> <tnhd9l$3bglv$2@dont-email.me> <k02s5aFjp4fU2@mid.individual.net> <87mt7mwyvl.fsf@usenet.ankman.de> <op.1xa671jca3w0dxdave@hodgins.homeip.net> <871qoywh67.fsf@usenet.ankman.de> <op.1xbuojdxa3w0dxdave@hodgins.homeip.net> <BbycncHF--dO7jv-nZ2dnZfqn_qdnZ2d@earthlink.com>
MIME-Version: 1.0
Content-Type: text/plain
Injection-Info: reader01.eternal-september.org; posting-host="737b7a30a0ed2501b69a13718c940fa7"; logging-data="2126404"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1+Nooa31TNF8csfam/Y316u"
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux)
Cancel-Lock: sha1:PGn5dkH7GN7X5gqrpoav6eg0hm0= sha1:dWOjTnjkNeuarwOS1Ti9CLDjyLM=
X-No-Archive: Yes
Xref: csiph.com comp.os.linux.misc:36590

On Fri, 23 Dec 2022 22:36:50 -0500, 26C.Z969 wrote:
>
> On 12/17/22 10:30 AM, David W. Hodgins wrote:
>
>> When you get a few dozen hits per minute, it doesn't take a week to
>> use a lot
>> of log space. Rotating more often will mean info will be removed
>> sooner too.
>> Granted, disk drive space has come down in price a lot since I ran
>> into the
>> issue and switched to using a custom port, but there are also new systems
>> such as raspberry pi, that normally run from an sd card, which limits the
>> drive size.
>
>   I've writ a number of special-purpose apps for PIs, but
>   yes, the space issue requires a lot of thought. You CAN
>   attach a USB SSD or even an efficient USB HD (have a 3tb
>   one attached to one Pi)

"pi" also seems to be a famous username for trying to get into a
computer, as I can see in my logs.

| 2022-12-23T03:06:33.815375-05:00 localhost sshd[22509]: Failed password for invalid user pi from 89.109.32.143 port 24603 ssh2

Got tons of these, next to "admin".

Recently I allowed the scammers "SSH access" again. Not limiting it to
192.168.0.0 anymore, to get some log entries.

Btw. the IP attempting from in this extract is from Russia. Could be a
hacked computer though.
-- 
Andreas