Re: Bye Bye [preauth]

To: "Vito.V" <vitov@cagliastromedia.com>
Cc: "debian-user@lists.debian.org" <debian-user@lists.debian.org>
Subject: Re: Bye Bye [preauth]
From: Jeffrey Walton <noloader@gmail.com>
Date: Wed, 5 Jul 2023 04:07:20 -0400
Message-id: <[🔎] CAH8yC8no68hO8WKVO5HTYFW-4BE1-5ndEJ1qZA+dAQMgQNOnYg@mail.gmail.com>
Reply-to: noloader@gmail.com
In-reply-to: <[🔎] HiSFIC0cKG1yQED9wC1Md3DV99e2AYQ42Yddjh00MkBdxpHtTWB8F9C4fBMvUhQt5cLN4BukhwDeM5xn5WVTnQUbMfhPo_aX8QA1LwLKuWU=@cagliastromedia.com>
References: <[🔎] HiSFIC0cKG1yQED9wC1Md3DV99e2AYQ42Yddjh00MkBdxpHtTWB8F9C4fBMvUhQt5cLN4BukhwDeM5xn5WVTnQUbMfhPo_aX8QA1LwLKuWU=@cagliastromedia.com>

On Wed, Jul 5, 2023 at 1:42 AM Vito.V <vitov@cagliastromedia.com> wrote:
>
> Hi I have a question about preauth attempts per day.
>
> When I run logwatch Why do I get ? Bye Bye [preauth] : 2484 Times ?
>
> there are around 3000 connections to SSH per day. Is this amount normal ?
>
> Is this something to be concerned about?

Your machine is being scanned. It is par for the course for an
internet facing machine.

I believe the log entry is from
https://github.com/openssh/openssh-portable/blob/master/monitor.c :
455 (with msg = "Bye Bye").

Jeff

Reply to:

References:
- Bye Bye [preauth]
  - From: "Vito.V" <vitov@cagliastromedia.com>

Prev by Date: Re: [partly solved] Re: mounting media in plasma5
Next by Date: Re: override logrotate.timer from another package?
Previous by thread: Bye Bye [preauth]
Next by thread: Re: Bye Bye [preauth]
Index(es):
- Date
- Thread