Suspicious ssh attempts


Recommended Posts

Hi, bit concerned about these ssh attempt logs I've seen.

 

Logs on both of my unraid servers show these attempts at the same times on 1st and 3rd of June.

 

The IP is my flat mate. Don't think they would have been using a script or tool to try gain access. Could their PC have been infected? Just want to get some advice before I mention it to them as I don't really know them that well.

 

No other similar logs previously this year or since.

 

Attached full diagnostics from both servers.

 

Thanks.

 

image.thumb.png.da85d2a71c727bb97c48efbfe395bfe3.png

 

image.thumb.png.3dc114bc84335fc0a2eb4cef233090af.png

 

 

 

tower-diagnostics-20220614-0211.zip microserver-diagnostics-20220614-0212.zip

Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.