On Wed, Jul 5, 2023 at 1:42 AM Vito.V <vi...@cagliastromedia.com> wrote: > > Hi I have a question about preauth attempts per day. > > When I run logwatch Why do I get ? Bye Bye [preauth] : 2484 Times ? > > there are around 3000 connections to SSH per day. Is this amount normal ? > > Is this something to be concerned about?
Your machine is being scanned. It is par for the course for an internet facing machine. I believe the log entry is from https://github.com/openssh/openssh-portable/blob/master/monitor.c : 455 (with msg = "Bye Bye"). Jeff
