[arm-allstar] Does this look like someone is brute force attacking my node?

[Chris Smart]

Dumb beginner question time: what's bash? Is that the prompt I get 
when I use WINSCP to connect to my Mnode and edit .conf files?

(different from the menus I get when I SSH in?)

At 04:14 PM 2/25/2020, you wrote:

>Also, there is random password generation software installed in the
>HamVoIP distro, accessible from the bash prompt. For example, to make a
>10 character long random password:
>
>makepasswd -l 10
>
>73, David KB4FXC
>
>
>
>On Tue, 25 Feb 2020, "Doug Crompton via ARM-allstar" wrote:
>
> > BTW - if you want a way to generate a good random PW here is a site:
> >
> > https://passwordsgenerator.net/
> >
> > Just make sure you write passwords down somewhere in a safe place!
> >
> >
> > *73 Doug*
> >
> > *WA3DSP*
> >
> > *http://www.crompton.com/hamradio <http://www.crompton.com/hamradio>*
> >
> > On Tue, Feb 25, 2020 at 2:14 PM Doug Crompton <wa3dsp at gmail.com> wrote:
> >
> > > Please keep in mind that in most cases there is no reason to port forward
> > > the ssh port unless you need or want control of your node from a remote
> > > source. Most node operators do not, but they forward this port anyhow. If
> > > you have only an occasional need for outside access then only forward for
> > > that need. Also keep in mind that other than the additional 
> traffic, using
> > > a good random greater than 10 character upper/lower, numeric, special
> > > character password is not going to get broken. They eventually give up.
> > > Also the ssh process itself will slow them down.
> > >
> > > So lets not make a big deal about this. It comes up like many 
> other topics
> > > on this list on a cyclic basis when someone complains. The for days it
> > > becomes the topic of discussion. It has gone on forever and will go on
> > > forever. No you can't trace with any reliability who it is so 
> it is usually
> > > not even worth the time trying.
> > >
> > >
> > > *73 Doug*
> > >
> > > *WA3DSP*
> > >
> > > *http://www.crompton.com/hamradio <http://www.crompton.com/hamradio>*
> > >
> > > On Tue, Feb 25, 2020 at 1:53 PM "Don Backstrom - AA7AU via ARM-allstar" <
> > > arm-allstar at hamvoip.org> wrote:
> > >
> > >> On Tue 25-Feb-20 06:52, "kd6gdb--- via ARM-allstar" wrote:
> > >> > Most of em are automated attacks from china.
> > >>
> > >>         As the admin for a number of publicly viewable [mostly
> > >> low-volume]
> > >> websites, I see lots and lots and lots of bot attacks, of all sorts,
> > >> from IP addresses from all over the world, including from the good-old
> > >> USA.
> > >>
> > >>         For most sites, I am able to block by underlying generally
> > >> accurate
> > >> country code for the IP range, but that doesn't stop the US-based
> > >> attacks (whom I cannot block in toto). Many of those are from Amazon,
> > >> GoDaddy, etc type hosting accounts and I suspect most of those accounts
> > >> are throw-away. Many of the rest from the US seem to be from residential
> > >> networks.
> > >>
> > >>         It's anyone guess who is behind any one one of these bot
> > >> networks, but
> > >> I can tell exactly where the fault lies ... those gentle innocent folks
> > >> who have NOT properly protected* their home/small-biz computers/accounts
> > >> - which then became infected by the bad guys and are now the hidden
> > >> fortresses for those bot networks.
> > >>
> > >>         <opinion> *BTW: properly protected does NOT mean simply paying
> > >> someone
> > >> else for a glossy "Anti-whatever" package and understanding nothing
> > >> about it. It also, in my mind at least, means NOT running Windows10
> > >> unless you understand it and have fully secured it. M$ is a big part of
> > >> the problem, certainly not the solution. </opinion>
> > >>
> > >>         If it's convenient, you're at risk (as well as everyone else)!
> > >>
> > >>         We have met the enemy and he is us!  (Pogo Papers, c. 1953)
> > >>
> > >>         Just another perspective,
> > >>
> > >>         - Don - AA7AU
> > >> _______________________________________________
> > >>
> > >> ARM-allstar mailing list
> > >> ARM-allstar at hamvoip.org
> > >> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
> > >>
> > >> Visit the BBB and RPi2/3/4 web page - http://hamvoip.org
> > >>
> > >
> > _______________________________________________
> >
> > ARM-allstar mailing list
> > ARM-allstar at hamvoip.org
> > http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
> >
> > Visit the BBB and RPi2/3/4 web page - http://hamvoip.org
> >
>
>_______________________________________________
>
>ARM-allstar mailing list
>ARM-allstar at hamvoip.org
>http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>
>Visit the BBB and RPi2/3/4 web page - http://hamvoip.org