SSHD- Session

I need help on stopping these unauthorized sessions
what can I do about this?

sshd-session Connection closed by authenticating user fanbohao 198.55.98.49 port 53538 [preauth]
sshd-session Failed password for taco from 198.55.98.55 port 12342 ssh2
sshd-session Connection closed by authenticating user john 198.55.98.53 port 4650 [preauth]
sshd-session Failed password for fanbohao from 198.55.98.49 port 18836 ssh2
sshd-session Connection closed by authenticating user john 198.55.98.53 port 62744 [preauth]
sshd-session Connection closed by authenticating user john 198.55.98.53 port 16914 [preauth]

Comments

  • james.carsonjames.carson Moderator, WatchGuard Representative

    Hi @MikeVerin

    I'd suggest opening a support case via the support center link at the top right of this page.

    The firebox does support SSH connections. However.
    -The ports mentioned in your log would normally be closed. Is there a firewall rule that allows this traffic?
    -If you are using the Access Portal for SSH, these logs may be related to that service.

    Thank you,

    -James Carson
    WatchGuard Customer Support

Sign In to comment.