toad.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Mastodon server operated by David Troy, a tech pioneer and investigative journalist addressing threats to democracy. Thoughtful participation and discussion welcome.

Administered by:

Server stats:

302
active users

#passwordguessing

0 posts0 participants0 posts today
Peter N. M. Hansteen<p>Psychologists may be able to explain what happened here:</p><p>May 13 14:04:14 skapet sshd-session[88955]: Failed password for invalid user FAKESSH from 213.178.90.84 port 41918 ssh2</p><p>(meh, <a href="https://nxdomain.no/~peter/hailmary_lessons_learned.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">nxdomain.no/~peter/hailmary_le</span><span class="invisible">ssons_learned.html</span></a> and links therein *might* be relevant) <a href="https://mastodon.social/tags/passwordgropers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordgropers</span></a> <a href="https://mastodon.social/tags/ssh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ssh</span></a> <a href="https://mastodon.social/tags/passwordguessing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordguessing</span></a> <a href="https://mastodon.social/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybercrime</span></a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>security</span></a></p>
Peter N. M. Hansteen<p>It will not be a surprise that the ovenight haul of new groped-for user IDs today included, almost <a href="https://mastodon.social/tags/hailmary" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>hailmary</span></a> style, a bunch of vaguely <a href="https://mastodon.social/tags/cryptocurrencly" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cryptocurrencly</span></a> related ones, <a href="https://nxdomain.no/~peter/tuliptraders.txt" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">nxdomain.no/~peter/tuliptrader</span><span class="invisible">s.txt</span></a>, log extract <a href="https://nxdomain.no/~peter/tuliptraders-sshlog.txt" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">nxdomain.no/~peter/tuliptrader</span><span class="invisible">s-sshlog.txt</span></a>. Do <a href="https://mastodon.social/tags/cryptptulipcookers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cryptptulipcookers</span></a> actually run as users with passwords anywhere?</p><p>Of course all of those are in the list of imaginary friends, see <a href="https://nxdomain.no/~peter/hailmary_lessons_learned.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">nxdomain.no/~peter/hailmary_le</span><span class="invisible">ssons_learned.html</span></a> and <a href="https://nxdomain.no/~peter/badness_enumerated_by_robots.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">nxdomain.no/~peter/badness_enu</span><span class="invisible">merated_by_robots.html</span></a> for background. <a href="https://mastodon.social/tags/sshgropers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>sshgropers</span></a> <a href="https://mastodon.social/tags/passwordguessing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordguessing</span></a> <a href="https://mastodon.social/tags/cryptotulips" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cryptotulips</span></a> <a href="https://mastodon.social/tags/scams" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>scams</span></a> <a href="https://mastodon.social/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybercrime</span></a></p>
Peter N. M. Hansteen<p>So this happened:</p><p>Jan 30 03:07:16 skapet sshd-session[94311]: Failed password for invalid user "&gt; from 165.231.182.56 port 15613 ssh2</p><p>I wonder if we are seeing a variant of "gropefor database down, feeding raw html to the ssh gropebot" scenario again such as in <a href="https://nxdomain.no/~peter/so_somebody_is_throwing_html_at_your_sshd.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">nxdomain.no/~peter/so_somebody</span><span class="invisible">_is_throwing_html_at_your_sshd.html</span></a> <a href="https://mastodon.social/tags/sshgropers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>sshgropers</span></a> <a href="https://mastodon.social/tags/sshd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>sshd</span></a> <a href="https://mastodon.social/tags/passwordguessing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordguessing</span></a> <a href="https://mastodon.social/tags/passwordgroping" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordgroping</span></a> <a href="https://mastodon.social/tags/passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwords</span></a> <a href="https://mastodon.social/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybercrime</span></a></p>
Peter N. M. Hansteen<p>Friday night follies included several attemtpts from root@example.com to deliver spam to one of the imaginary friends at <a href="https://nxdomain.no/~peter/traplist.shtml" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">nxdomain.no/~peter/traplist.sh</span><span class="invisible">tml</span></a> as well as somebot attempting to ssh in as user &lt;space&gt;, which for <a href="https://mastodon.social/tags/shell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>shell</span></a> reasons will not be able to join the 500k+ <a href="https://mastodon.social/tags/spamtraps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>spamtraps</span></a> </p><p>All while you were sleeping. <a href="https://mastodon.social/tags/spamd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>spamd</span></a> <a href="https://mastodon.social/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybercrime</span></a> <a href="https://mastodon.social/tags/antispam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>antispam</span></a> <a href="https://mastodon.social/tags/sshgropers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>sshgropers</span></a> <a href="https://mastodon.social/tags/passwordguessing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordguessing</span></a></p>
Peter N. M. Hansteen<p>Some of my friends here will fully understand the pleasure of, after generating 1k public spamtraps over a certain pattern, seeing the selfsame turn up soon after as things the passwords gropers try desperately for (drone???@somedomainyoullfigureout.tld) <a href="https://mastodon.social/tags/passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwords</span></a> <a href="https://mastodon.social/tags/passwordgropers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordgropers</span></a> <a href="https://mastodon.social/tags/passwordguessing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordguessing</span></a> <a href="https://mastodon.social/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybercrime</span></a> <a href="https://mastodon.social/tags/cyberscum" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cyberscum</span></a></p>
Peter N. M. Hansteen<p>Another one for the <a href="https://mastodon.social/tags/ssh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ssh</span></a> <a href="https://mastodon.social/tags/password" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>password</span></a> <a href="https://mastodon.social/tags/groper" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>groper</span></a> <a href="https://mastodon.social/tags/blooper" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>blooper</span></a> reel:</p><p>Nov 4 15:24:12 portal sshd-session[16361]: Failed password for invalid user user1!2@3#4$ from 185.11.61.88 port 40254 ssh2</p><p><a href="https://mastodon.social/tags/sshgropers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>sshgropers</span></a> <a href="https://mastodon.social/tags/passwordguessing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordguessing</span></a> <a href="https://mastodon.social/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybercrime</span></a> </p><p>(also to be added posthaste, with a domain appended, to the list of imaginary friends at <a href="https://nxdomain.no/~peter/traplist.shtml" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">nxdomain.no/~peter/traplist.sh</span><span class="invisible">tml</span></a>) <a href="https://mastodon.social/tags/spamtraps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>spamtraps</span></a></p>
Peter N. M. Hansteen<p>If you found the <a href="https://mastodon.social/tags/hailmary" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>hailmary</span></a> tag confusing in the previous, the summary article from some years back will possibly make for reading up on that particular weirdness during the long evenings ahead - "The Hail Mary Cloud and the Lessons Learned" <a href="https://nxdomain.no/~peter/hailmary_lessons_learned.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">nxdomain.no/~peter/hailmary_le</span><span class="invisible">ssons_learned.html</span></a> or prettified, tracked <a href="https://bsdly.blogspot.com/2013/10/the-hail-mary-cloud-and-lessons-learned.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">bsdly.blogspot.com/2013/10/the</span><span class="invisible">-hail-mary-cloud-and-lessons-learned.html</span></a> <a href="https://mastodon.social/tags/passwordgropers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordgropers</span></a> <a href="https://mastodon.social/tags/passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwords</span></a> <a href="https://mastodon.social/tags/passwordguessing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordguessing</span></a> <a href="https://mastodon.social/tags/ssh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ssh</span></a> <a href="https://mastodon.social/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybercrime</span></a></p>
Peter N. M. Hansteen<p>I'm at a loss for words -</p><p>Oct 29 19:59:39 skapet sshd-session[60243]: Failed password for invalid user root/123456 from 138.68.79.186 port 39166 ssh2</p><p><a href="https://mastodon.social/tags/ssh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ssh</span></a> <a href="https://mastodon.social/tags/passwordgropers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordgropers</span></a> <a href="https://mastodon.social/tags/passwordguessing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordguessing</span></a> <a href="https://mastodon.social/tags/sshgropers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>sshgropers</span></a> <a href="https://mastodon.social/tags/hailmary" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>hailmary</span></a> <a href="https://mastodon.social/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybercrime</span></a></p>
Peter N. M. Hansteen<p>The topic of <a href="https://mastodon.social/tags/ipv6" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ipv6</span></a> support came up at work (as it does sometimes) and a colleague asked, how popular is that protocol, really? </p><p>My best data source is the bruteforcers+webtrash data (twice hourly dump <a href="https://nxdomain.no/~peter/bruteforcers.txt" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">nxdomain.no/~peter/bruteforcer</span><span class="invisible">s.txt</span></a>, see <a href="https://nxdomain.no/~peter/badness_enumerated_by_robots.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">nxdomain.no/~peter/badness_enu</span><span class="invisible">merated_by_robots.html</span></a> for explanation, alternatively prettified and G-tracked <a href="https://bsdly.blogspot.com/2018/08/badness-enumerated-by-robots.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">bsdly.blogspot.com/2018/08/bad</span><span class="invisible">ness-enumerated-by-robots.html</span></a>) and it looks like roughly seven percent of the source addresses for undesirable activity are IPv6, the rest old fashioned <a href="https://mastodon.social/tags/IPv4" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>IPv4</span></a>. <a href="https://mastodon.social/tags/passwordguessing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordguessing</span></a> <a href="https://mastodon.social/tags/bruteforcers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>bruteforcers</span></a></p>
Peter N. M. Hansteen<p>The <a href="https://mastodon.social/tags/sshgropers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>sshgropers</span></a> are really throwing everything at the wall these days:</p><p>Aug 18 14:36:54 skapet sshd-session[71375]: Failed password for invalid user GNU/Linux from 4.247.176.60 port 39582 ssh2</p><p><a href="https://mastodon.social/tags/ssh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ssh</span></a> <a href="https://mastodon.social/tags/passwordgropers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordgropers</span></a> <a href="https://mastodon.social/tags/passwordguessing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordguessing</span></a> <a href="https://mastodon.social/tags/bruteforce" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>bruteforce</span></a> <a href="https://mastodon.social/tags/passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwords</span></a> <a href="https://mastodon.social/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybercrime</span></a></p><p>Also see <a href="https://nxdomain.no/~peter/hailmary_lessons_learned.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">nxdomain.no/~peter/hailmary_le</span><span class="invisible">ssons_learned.html</span></a> (prettier, G-tracked: <a href="https://bsdly.blogspot.com/2013/10/the-hail-mary-cloud-and-lessons-learned.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">bsdly.blogspot.com/2013/10/the</span><span class="invisible">-hail-mary-cloud-and-lessons-learned.html</span></a>) and badness_enumerated_by_robots.html (prettified, G-tracked <a href="https://bsdly.blogspot.com/2018/08/badness-enumerated-by-robots.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">bsdly.blogspot.com/2018/08/bad</span><span class="invisible">ness-enumerated-by-robots.html</span></a>)</p>
Peter N. M. Hansteen<p><span class="h-card" translate="no"><a href="https://mastodon.social/@cks" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>cks</span></a></span> Don't know whether it's any consolation, but it fits what I see here: <a href="https://nxdomain.no/~peter/ssh_attempts_month_to_date.txt" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">nxdomain.no/~peter/ssh_attempt</span><span class="invisible">s_month_to_date.txt</span></a> (rawer data <a href="https://nxdomain.no/~peter/newpart.txt" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">nxdomain.no/~peter/newpart.txt</span><span class="invisible"></span></a>), quasi-explanation in a somewhat speculative article <a href="https://www.bsdly.net/~peter/Predicting_developments_in_real_world_conflict_from_patterns_of_failed_logins.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">bsdly.net/~peter/Predicting_de</span><span class="invisible">velopments_in_real_world_conflict_from_patterns_of_failed_logins.html</span></a> also with trackers at <a href="https://bsdly.blogspot.com/2022/02/predicting-developments-in-real-world.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">bsdly.blogspot.com/2022/02/pre</span><span class="invisible">dicting-developments-in-real-world.html</span></a>) -- now with working img links :) <a href="https://mastodon.social/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybercrime</span></a> <a href="https://mastodon.social/tags/Ukraine" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Ukraine</span></a> <a href="https://mastodon.social/tags/attack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>attack</span></a> <a href="https://mastodon.social/tags/SSH" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SSH</span></a> <a href="https://mastodon.social/tags/passwordguessing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordguessing</span></a> <a href="https://mastodon.social/tags/passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwords</span></a> <a href="https://mastodon.social/tags/HailMary" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>HailMary</span></a> <a href="https://mastodon.social/tags/cyberwar" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cyberwar</span></a> <a href="https://mastodon.social/tags/groping" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>groping</span></a></p>
Peter N. M. Hansteen<p>I think this is what we call a 'Hail Mary pass' - </p><p>Jan 10 16:07:39 skapet sshd[71400]: Failed password for invalid user ***** from 116.110.116.188 port 58818 ssh2</p><p><a href="https://mastodon.social/tags/passwordgroping" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordgroping</span></a> <a href="https://mastodon.social/tags/passwordguessing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordguessing</span></a> <a href="https://mastodon.social/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybercrime</span></a> <a href="https://mastodon.social/tags/insecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>insecurity</span></a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>security</span></a> <a href="https://mastodon.social/tags/ssh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ssh</span></a> <a href="https://mastodon.social/tags/morons" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>morons</span></a> <a href="https://mastodon.social/tags/hailmary" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>hailmary</span></a></p>
Peter N. M. Hansteen<p>The return of the great-great-great grandchild of the Hail Mary Cloud is showing more activity than usual over the last few days, also yielding amusing new usernames. Today's favorites include randomcrazy and tacticalseedbox. Both of course now spamtraps. See <a href="https://www.bsdly.net/~peter/Predicting_developments_in_real_world_conflict_from_patterns_of_failed_logins.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">bsdly.net/~peter/Predicting_de</span><span class="invisible">velopments_in_real_world_conflict_from_patterns_of_failed_logins.html</span></a> (<a href="https://bsdly.blogspot.com/2022/02/predicting-developments-in-real-world.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">bsdly.blogspot.com/2022/02/pre</span><span class="invisible">dicting-developments-in-real-world.html</span></a>) and <a href="https://nxdomain.no/~peter/spammers_believe_in_300k_imaginary_friends.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">nxdomain.no/~peter/spammers_be</span><span class="invisible">lieve_in_300k_imaginary_friends.html</span></a> (<a href="https://bsdly.blogspot.com/2022/09/the-things-spammers-believe-tale-of.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">bsdly.blogspot.com/2022/09/the</span><span class="invisible">-things-spammers-believe-tale-of.html</span></a>) and links therein for reference. <a href="https://mastodon.social/tags/ssh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ssh</span></a> <a href="https://mastodon.social/tags/password" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>password</span></a> <a href="https://mastodon.social/tags/passwordgroping" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordgroping</span></a> <a href="https://mastodon.social/tags/passwordguessing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordguessing</span></a> <a href="https://mastodon.social/tags/spamtraps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>spamtraps</span></a></p>