Saya telah diperingatkan bahwa server saya melanggar batas transfernya. Saya mengira bahwa simpul Tor saya menjadi populer sehingga saya memilih untuk menonaktifkannya bulan ini (bukan pilihan terbaik untuk komunitas tetapi saya harus turun). Kemudian saya perhatikan bahwa server mentransfer sekitar 4GB malam ini. Saya telah memeriksa log Apache dengan Awstats, tidak ada lalu lintas yang relevan (dan saya tidak meng-host situs yang sangat populer di sana). Saya sudah memeriksa log surat, tidak ada yang mencoba mengirim sampah. Saya telah memeriksa messages
log dan menemukan banyak dari ini
Apr 29 10:17:53 marcus sshd[9281]: Did not receive identification string from 85.170.189.156
Apr 29 10:18:07 marcus sshd[9283]: Did not receive identification string from 86.208.123.132
Apr 29 10:18:24 marcus sshd[9298]: Did not receive identification string from 85.170.189.156
Apr 29 10:18:39 marcus sshd[9303]: Did not receive identification string from 86.208.123.132
Apr 29 10:18:56 marcus sshd[9306]: Did not receive identification string from 85.170.189.156
Apr 29 10:19:11 marcus sshd[9309]: Did not receive identification string from 86.208.123.132
Apr 29 10:19:18 marcus sshd[9312]: Did not receive identification string from 101.98.178.92
Apr 29 10:19:27 marcus sshd[9314]: Did not receive identification string from 85.170.189.156
Apr 29 10:19:41 marcus sshd[9317]: Did not receive identification string from 86.208.123.132
Apr 29 10:20:01 marcus sshd[9321]: Did not receive identification string from 85.170.189.156
Apr 29 10:20:13 marcus sshd[9324]: Did not receive identification string from 86.208.123.132
Apr 29 10:20:32 marcus sshd[9327]: Did not receive identification string from 85.170.189.156
Apr 29 10:20:48 marcus sshd[9331]: Did not receive identification string from 86.208.123.132
Apr 29 10:21:07 marcus sshd[9336]: Did not receive identification string from 85.170.189.156
Apr 29 10:21:20 marcus sshd[9338]: Did not receive identification string from 86.208.123.132
Apr 29 10:21:35 marcus sshd[9341]: Did not receive identification string from 85.170.189.156
Apr 29 10:21:51 marcus sshd[9344]: Did not receive identification string from 86.208.123.132
Apr 29 10:22:06 marcus sshd[9349]: Did not receive identification string from 85.170.189.156
Apr 29 10:22:23 marcus sshd[9353]: Did not receive identification string from 86.208.123.132
Apr 29 10:22:39 marcus sshd[9359]: Did not receive identification string from 85.170.189.156
Apr 29 10:22:54 marcus sshd[9361]: Did not receive identification string from 86.208.123.132
Apr 29 10:23:10 marcus sshd[9367]: Did not receive identification string from 85.170.189.156
Apr 29 10:23:29 marcus sshd[9369]: Did not receive identification string from 86.208.123.132
Apr 29 10:23:45 marcus sshd[9375]: Did not receive identification string from 85.170.189.156
Apr 29 10:24:10 marcus sshd[9387]: Did not receive identification string from 86.208.123.132
Apr 29 10:24:16 marcus sshd[9388]: Did not receive identification string from 85.170.189.156
Setiap beberapa detik bot mencoba untuk meretas SSH saya, yang tidak mungkin karena saya memerlukan otentikasi pubkey. Pertanyaan saya adalah: dapatkah lalu lintas ini, pada frekuensi ini, mengkonsumsi 4GB (katakanlah 3,5) dalam 10 jam serangan terus menerus?
Saya telah mengubah port SSH saya dan menghentikan serangan ini, tetapi saya tidak yakin tentang konsumsi jaringan saya. Saya tidak memiliki layanan di luar kendali menjalankan-firewall saya agak membatasi-, atau berbagi server dengan seseorang yang melakukan P2P atau apa pun. Kekhawatiran saya adalah di bawah 400GB / bulan.
Ada tips?