[PLUG] SSH log entries need explanation

Rich Shepard rshepard at appl-ecosys.com
Mon Aug 12 13:37:18 UTC 2024


This morning's log watch report for yesterday showed SSH entries I've not
before seen:

--------------------- SSHD Begin ------------------------

  **Unmatched Entries**
  Could not write ident string to 206.168.34.210 port 40828 : 1 Time
  Could not write ident string to 206.168.34.210 port 40844 : 1 Time
  Could not write ident string to 206.168.34.210 port 46502 : 1 Time
  Could not write ident string to 206.168.34.210 port 59586 : 1 Time

---------------------- SSHD End -------------------------

Normally, the only time I see a ssh log report is after rebooting. This IP
address is an ISP in Ann Arbor, MI and I had not tried to connect to them,
and they (or one of their customers) should have no reason to contact me.
Unless this was an intrusion attempt.

I'd appreciate an explanation.

TIA,

Rich




More information about the PLUG mailing list