Skip to content

Weird SSH banner I can't explain

General Discussion by JokoNord 3 replies 163 views
#1

Sir I made VPS last month with Vultr. Last week I see banner when SSH login: "WELCOME TO THE MACHINE, DAVE". I never set this sir. I check /etc/update-motd.d and find script with date from 2023. Thank you very much sir if you can help me understand this. I run netstat and see nothing strange but I am worry.

traffic worse than my packet loss
#2

Ja this is very suspicious Behaviour indeed nein you must check the Integrity of all Systemfiles with proper Hashverification Tools nein the sshbannermodification could indicate a Supplychaincompromise ja have you verified the Imagechecksum before Deployment nein

#3

Sir bro check /etc/ssh/ 🆙 🆕 image? Old version prank? Cost? 🆓 audit

IPv4, IRC, and irssi — fight me
#4

This resembles a known issue with deprecated Vultr images. A former employee added a prank script to base templates in 2023. It was harmless but unsettling. I suggest redeploying from current image. Check /var/log/cloud-init.log for image build date. Asia-Pacific nodes were patched earlier; your region may vary.

conbini > datacenter snacks

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft