[lug] Mystery SSH diagnostic lines

Mike Witt msg2mw at gmail.com
Sun Aug 1 09:30:38 MDT 2021


I have these four "mystery" lines that just popped up in my log:

Aug  1 08:33:43 hp sshd[123226]: Received disconnect from 10.0.0.8 port  
58932:11:  [preauth]
Aug  1 08:33:43 hp sshd[123226]: Disconnected from 10.0.0.8 port 58932  
[preauth]
Aug  1 08:34:12 hp sshd[123235]: Received disconnect from 10.0.0.8 port  
60633:11:  [preauth]
Aug  1 08:34:12 hp sshd[123235]: Disconnected from 10.0.0.8 port 60633  
[preauth]

"hp" is my desktop linux mint system. This is where the lines showed up  
in the log.

10.0.0.8 is a Microsoft Windows laptop that my wife does video editing  
on. Unless SSH comes with Windows now-a-days, I don't *think* it has  
either an ssh client or server. But, in any event, she wasn't doing  
anything with ssh.

I wondered if these were the result of my accidentily trying to ssh  
FROM the hp TO  10.0.0.8, so I tried that and it just hung. Nothing  
showed up in my log.

I can't figure out what the four lines above could possibly mean.  
Anybody have any idea?

Many thanks!

-Mike


More information about the LUG mailing list