• @[email protected]
    link
    fedilink
    42
    edit-2
    11 months ago

    There is tons of bot farm attacking any device connected to the internet all the time

    A neat experiment is to configure an SSH server that has no users. It’ll allow connections but it isn’t possible to actually login. It’ll also have a log where you can view login attempts. Within a few days of going online, your logs should be filled will tens of thousands of login attempts from IP addresses from around the world.

      • @wildbus8979
        link
        1011 months ago

        You should see what gets sent to web servers. All sorts of exploit strings ranging from IIS to WordPress.

    • sylver_dragon
      link
      fedilink
      English
      1411 months ago

      Yup, in the last 24 hours, my little home server had 244 failed ssh logins and a bunch of web application attacks. If it’s on the internet, it’s under attack constantly. Fall behind on your patching, and you’re going to get popped.