• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

ET SCAN Potential SSH Scan OUTBOUND SSH

Scheduled Pinned Locked Moved Firewalling
3 Posts 2 Posters 373 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • X
    xokia
    last edited by xokia Jun 4, 2024, 3:15 PM Jun 4, 2024, 3:13 PM

    I have snort running and started seeing this lately. How do I investigate which application is trying to connect to SSH?

    192.168.3.12 is my home server running unraid. Which runs a plex server and some other apps. I do not have sftp nor ssh enabled so I should have nothing trying to connect to SSH.

    21073442-ea52-4909-8a88-9936658e45c7-image.png

    M 1 Reply Last reply Jun 4, 2024, 3:16 PM Reply Quote 0
    • M
      mcury @xokia
      last edited by Jun 4, 2024, 3:16 PM

      @xokia

      https://forums.unraid.net/topic/127330-flash-backup-activated-not-up-to-date-flash-backup-unavailable/

      https://www.reddit.com/r/unRAID/comments/o25ra2/port_22_connection/

      dead on arrival, nowhere to be found.

      X 1 Reply Last reply Jun 4, 2024, 3:39 PM Reply Quote 1
      • X
        xokia @mcury
        last edited by Jun 4, 2024, 3:39 PM

        @mcury interesting I will have to look more. I do have usb backup but have had it for a while and this snort issue just recently started popping up. My backup still does work as far as I can tell.

        1 Reply Last reply Reply Quote 0
        3 out of 3
        • First post
          3/3
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
          This community forum collects and processes your personal information.
          consent.not_received