OVH warning says a VPS tried SSH logins on other servers
OVH warned that a VPS may be showing abusive behavior. The shared logs show that the VPS tried to make SSH connections to several outside machines.
The login names included common targets such as root, git, and ubuntu. Most attempts failed because the password was wrong, and some attempts used accounts that did not exist.
The times run from early morning on July 1 through around midday. The pattern suggests that something on the VPS may have been trying logins against other servers.
Key points
- OVH said the VPS may be behaving abusively.
- The logs show SSH login attempts from the VPS to other machines.
- The attempts used common account names such as root, git, and ubuntu.
- The failed attempts could still indicate attack behavior.
- operators should also monitor outgoing connections, not only incoming logins.