sshguard: Attack from "10.0.9.7" on service 380 with danger 10.

chedxb

hello everyone,

I started seeing a weird message on the log file as follows;

Jul 5 22:37:12 sshguard 53069 Attack from "10.0.9.7" on service 380 with danger 10.

when I connect to my pfSense box from an OpenVPN client (Windows 10)

Why am I getting this message when I don't even use SSH and/or port 22?

Best,

Savas

KOM

That's sshguard being over-sensitive. You can whitelist your LAN IP via Advanced - Admin access - Login Protection - Whitelist.

jimp

sshguard also protects access to the GUI, not just SSH.