我们刚刚收到服务器提供商 Hetzner 的滥用报告，指出某台 免费 VPS 被用于发起网络攻击（SSH 暴力破解行为）。经排查，该服务器由社区某位用户申请并使用，但被恶意利用，导致 IP 被投诉。
- 滥用类型：SSH 暴力破解尝试（对外发起攻击）
后续措施：
- 免费服务器默认要求白银会员才可登录。
- 目前所有vps将关机，需要登录重新开机。
- 持续监控服务器行为，一旦发现异常将立即停机并拉黑相关账户。
- 社区规则更新：任何利用 Nodeloc 提供的服务从事攻击、扫描、非法行为的账号将被永久封禁。
我们一贯致力于打造一个友好、开放、共享的技术社区。请大家珍惜来之不易的免费资源，严格遵守相关法律法规与社区规范。
感谢大家的理解与配合。
—— Nodeloc 管理团队
2025 年 8 月 13 日
Abuse 邮件内容
Dear Mr James Super,
We have received an abuse report regarding network attacks for your IP address 65.109.91.40.
Please check the report for details and fix any (potential) problems:
Abuse data
Source: 65.109.91.40
Category: attacks/(d)dosDescription:
Someone originating from Hetzner’s IP range has made and failed attempts. I have a few emails with alerts.
Log extract:
New alert:
105 SSH login failures in the last 24 hours: … first 101 messages skipped … 11 Aug 06:13:23: Failed password for root from 65.109.91.40 port 53762 ssh2 11 Aug 06:13:24: Failed password for root from 65.109.91.40 port 53620 ssh2 11 Aug 06:13:25: Failed password for root from 65.109.91.40 port 53634 ssh2 11 Aug 06:13:26: Failed password for root from 65.109.91.40 port 53644 ssh2
The following alert has been cleared:
100 SSH login failures in the last 24 hours: … first 96 messages skipped … 11 Aug 06:13:02: Failed password for root from 65.109.91.40 port 51444 ssh2 11 Aug 06:13:03: Failed password for root from 65.109.91.40 port 51456 ssh2 11 Aug 06:13:12: Failed password for root from 65.109.91.40 port 48786 ssh2 11 Aug 06:13:13: Failed password for root from 65.109.91.40 port 48798 ssh2