Hi, bit concerned about these ssh attempt logs I've seen.

 

Logs on both of my unraid servers show these attempts at the same times on 1st and 3rd of June.

 

The IP is my flat mate. Don't think they would have been using a script or tool to try gain access. Could their PC have been infected? Just want to get some advice before I mention it to them as I don't really know them that well.

 

No other similar logs previously this year or since.

 

Attached full diagnostics from both servers.

 

Thanks.

 

 

 

 

 

tower-diagnostics-20220614-0211.zip microserver-diagnostics-20220614-0212.zip

4 hours ago, mrbens said:

Could their PC have been infected?

Could be that, or maybe they have a 'helpful' antivirus / antimalware trying to scan the network for vulnerabilities.