[GH-ISSUE #379] amnezia android client trying connecting to ssh without credentials #107

Closed
opened 2026-10-13 20:12:53 +00:00 by bsakaguchi · 7 comments
Owner

Originally created by @stanislavvv on GitHub (Oct 17, 2023).
Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/379

Amnezia android client try to connect to ssh when connecting with shared connection (not server):

Oct 17 14:41:04 ftn sshd[2219949]: Invalid user  from x.x.x.x port 39894
Oct 17 14:41:04 ftn sshd[2219949]: Failed none for invalid user  from x.x.x.x port 39894 ssh2

If my wife and children connect to vpn in several minutes interval - fail2ban ban all connections to vds, because too many ssh errors from ip.

To Reproduce
Steps to reproduce the behavior:

  1. create server (in my case - cloak+openvpn)
  2. share connection (not server) to another client
  3. connect with shared connection
  4. see ssh logs

Expected behavior
No ssh interaction at all with shared connection.

Originally created by @stanislavvv on GitHub (Oct 17, 2023). Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/379 Amnezia android client try to connect to ssh when connecting with shared connection (not server): ``` Oct 17 14:41:04 ftn sshd[2219949]: Invalid user from x.x.x.x port 39894 Oct 17 14:41:04 ftn sshd[2219949]: Failed none for invalid user from x.x.x.x port 39894 ssh2 ``` If my wife and children connect to vpn in several minutes interval - fail2ban ban all connections to vds, because too many ssh errors from ip. **To Reproduce** Steps to reproduce the behavior: 1. create server (in my case - cloak+openvpn) 2. share connection (not server) to another client 3. connect with shared connection 4. see ssh logs **Expected behavior** No ssh interaction at all with shared connection.
Author
Owner

@stanislavvv commented on GitHub (Oct 17, 2023):

forgot version: 3.0.10

<!-- gh-comment-id:1766071977 --> @stanislavvv commented on GitHub (Oct 17, 2023): forgot version: 3.0.10
Author
Owner

@pokamest commented on GitHub (Oct 17, 2023):

Looks like you had shared full access to your family, usually you don't need to share full access, just share vpn configs.
By the way, AmneziaVPN 4.0.8 beta is released, you can try it - https://github.com/amnezia-vpn/amnezia-client/releases/tag/4.0.8

<!-- gh-comment-id:1766323595 --> @pokamest commented on GitHub (Oct 17, 2023): Looks like you had shared full access to your family, usually you don't need to share full access, just share vpn configs. By the way, AmneziaVPN 4.0.8 beta is released, you can try it - https://github.com/amnezia-vpn/amnezia-client/releases/tag/4.0.8
Author
Owner

@stanislavvv commented on GitHub (Oct 18, 2023):

It was not "Share server", it was "Share for Amnezia". In decoded url i does not see user/password.

<!-- gh-comment-id:1767674068 --> @stanislavvv commented on GitHub (Oct 18, 2023): It was not "Share server", it was "Share for Amnezia". In decoded url i does not see user/password.
Author
Owner

@stanislavvv commented on GitHub (Oct 18, 2023):

In 4.0.8 only first connect try to login with empty user.
In Debian terminology — minor bug.

<!-- gh-comment-id:1767696775 --> @stanislavvv commented on GitHub (Oct 18, 2023): In 4.0.8 only first connect try to login with empty user. In Debian terminology — minor bug.
Author
Owner

@stanislavvv commented on GitHub (Oct 18, 2023):

Previous messsage - only for testing in same phone...
When i share connection ("Share for Amnezia") with another phone, take "Internal error" and in app log see:

2023-10-18 11:25:59 critical "Access denied for 'password'. Authentication that can continue: publickey,password"

and in server logs same records as in 1st message

<!-- gh-comment-id:1767762675 --> @stanislavvv commented on GitHub (Oct 18, 2023): Previous messsage - only for testing in same phone... When i share connection ("Share for Amnezia") with another phone, take "Internal error" and in app log see: 2023-10-18 11:25:59 critical "Access denied for 'password'. Authentication that can continue: publickey,password" and in server logs same records as in 1st message
Author
Owner

@pokamest commented on GitHub (Feb 24, 2024):

@stanislavvv please report if problem is still exists in latest release 4.4

<!-- gh-comment-id:1962321707 --> @pokamest commented on GitHub (Feb 24, 2024): @stanislavvv please report if problem is still exists in latest release 4.4
Author
Owner

@stanislavvv commented on GitHub (Feb 26, 2024):

No ssh connects in vpn access. I think issue resolved.

<!-- gh-comment-id:1964008348 --> @stanislavvv commented on GitHub (Feb 26, 2024): No ssh connects in vpn access. I think issue resolved.
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
amnezia-vpn/amnezia-client#107
No description provided.