[PLUG] SSH log entries need explanation
Rich Shepard
rshepard at appl-ecosys.com
Mon Aug 12 13:37:18 UTC 2024
This morning's log watch report for yesterday showed SSH entries I've not
before seen:
--------------------- SSHD Begin ------------------------
**Unmatched Entries**
Could not write ident string to 206.168.34.210 port 40828 : 1 Time
Could not write ident string to 206.168.34.210 port 40844 : 1 Time
Could not write ident string to 206.168.34.210 port 46502 : 1 Time
Could not write ident string to 206.168.34.210 port 59586 : 1 Time
---------------------- SSHD End -------------------------
Normally, the only time I see a ssh log report is after rebooting. This IP
address is an ISP in Ann Arbor, MI and I had not tried to connect to them,
and they (or one of their customers) should have no reason to contact me.
Unless this was an intrusion attempt.
I'd appreciate an explanation.
TIA,
Rich
More information about the PLUG
mailing list