Hacker News Reader

WillieStevensonon What SSH Hacking Attempts Look Like

Long ago I made the same thing.

WillieStevensonon 3 months and 1M SSH attempts later

Look. Malicious boxes are attacking me. Although I must be politically correct in this situation to probably please everyone, while I probably shouldn't have logged into the router in question, I would prefer to publish such IPs because they have the potential to harm other machines.

Actually that particular IP attacked me more than 170 times. It may be useful to others to keep this address on their "naughty" list of hosts to ban.

WillieStevensonon 3 months and 1M SSH attempts later

My apologies. I have blocked out the content to prevent any further harm.

WillieStevensonon 3 months and 1M SSH attempts later

Damn it. I should of. I don't know how I would do that now though. He probably got pwned of the internet by now. lol.

WillieStevensonon 3 months and 1M SSH attempts later

Just like it's a crime trying to ssh into a box that is not yours right? And besides I didn't do anything to the router. I was simply pointing out that you should change your default credentials and hide your router.

... should be a crime to not change the default credentials.

WillieStevensonon 3 months and 1M SSH attempts later

Like I mentioned above, changing the SSH port would only lessen the attempts on my box. I am interested in collecting as much data as possible.

WillieStevensonon 3 months and 1M SSH attempts later

tdicola: To authenticate myself, I use an ssh key. However, the goal of this project was to log all attacks over ssh. So setting up fail2ban and disabling password login would prohibit this collection of data. I have a massive password in place, so I'm not worried in the least.

WillieStevensonon What I learned from suffering my first and last XSS attack

You're welcome.

WillieStevensonon Raspberry Pi 3 on Sale

I just bought the Raspberry Pi 2 less than 1 week ago thinking it was about time to upgrade. WTH.

WillieStevensonon What I learned from suffering my first and last XSS attack

Google analytics?

WillieStevensonon What I learned from suffering my first and last XSS attack

Hi CiPHPerCoder. Can I PM you?

WillieStevensonon What I learned from suffering my first and last XSS attack

jacobparker: Indeed. I added related headers to my web server conf after the fact (https://github.com/WillieStevenson/conf-files/blob/master/ng...). I should of have mentioned it in my post.