Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    ET SCAN Potential SSH Scan OUTBOUND SSH

    Scheduled Pinned Locked Moved
    Firewalling
    2
    3
    184
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • X
      xokia
      last edited by xokia

      I have snort running and started seeing this lately. How do I investigate which application is trying to connect to SSH?

      192.168.3.12 is my home server running unraid. Which runs a plex server and some other apps. I do not have sftp nor ssh enabled so I should have nothing trying to connect to SSH.

      21073442-ea52-4909-8a88-9936658e45c7-image.png

      M 1 Reply Last reply Reply Quote 0
      • M
        mcury @xokia
        last edited by

        @xokia

        https://forums.unraid.net/topic/127330-flash-backup-activated-not-up-to-date-flash-backup-unavailable/

        https://www.reddit.com/r/unRAID/comments/o25ra2/port_22_connection/

        X 1 Reply Last reply Reply Quote 1
        • X
          xokia @mcury
          last edited by

          @mcury interesting I will have to look more. I do have usb backup but have had it for a while and this snort issue just recently started popping up. My backup still does work as far as I can tell.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post