Most likely : Someone script kiddie tried to attack-it, and some user had a week password.
There is tons of bot farm attacking any device connected to the internet all the time, as indiviual, we usually have a firewall/router between our PC and internet (so the whole family gets wifi), and keep all the "remote access services" off. But a telescope is typically the kind of infrastructure where "remote access" is necessary meaning that you're a target for attacker
There is tons of bot farm attacking any device connected to the internet all the time
A neat experiment is to configure an SSH server that has no users. It'll allow connections but it isn't possible to actually login. It'll also have a log where you can view login attempts. Within a few days of going online, your logs should be filled will tens of thousands of login attempts from IP addresses from around the world.
Yup, in the last 24 hours, my little home server had 244 failed ssh logins and a bunch of web application attacks. If it's on the internet, it's under attack constantly. Fall behind on your patching, and you're going to get popped.
Yup. Our company gets this all the time, in addition to some impromptu basic pentesting.
Most likely : Someone script kiddie tried to attack-it, and some user had a week password. There is tons of bot farm attacking any device connected to the internet all the time, as indiviual, we usually have a firewall/router between our PC and internet (so the whole family gets wifi), and keep all the "remote access services" off. But a telescope is typically the kind of infrastructure where "remote access" is necessary meaning that you're a target for attacker
A neat experiment is to configure an SSH server that has no users. It'll allow connections but it isn't possible to actually login. It'll also have a log where you can view login attempts. Within a few days of going online, your logs should be filled will tens of thousands of login attempts from IP addresses from around the world.
Yup, in the last 24 hours, my little home server had 244 failed ssh logins and a bunch of web application attacks. If it's on the internet, it's under attack constantly. Fall behind on your patching, and you're going to get popped.
Yup. Our company gets this all the time, in addition to some impromptu basic pentesting.