Unknown ssh connections
I just checked the ssh connections logs, because my public bandwidth is unusually high and found this:
tcp ESTAB 0 1080 220.127.116.11:ssh 18.104.22.168:49833 tcp FIN-WAIT-1 0 1 22.214.171.124:ssh 126.96.36.199:22882 tcp ESTAB 0 36 188.8.131.52:ssh *MYIP*:61630 tcp ESTAB 0 1080 184.108.40.206:ssh 220.127.116.11:21058 tcp ESTAB 0 1080 18.104.22.168:ssh 22.214.171.124:47166
All of these except mine are chinese ips. I looked them up and they are all from the “Asia Pacific Network Information Centre”. Not sure what to do now with this information, but I don’t like it. Do I need to worry?
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.×