Outbound SSH port scan HC2

[ppeterr 206]

Could someone explain me what is happening here, it looks a little strange to me that a HC2 performs

SSH port scans over the internet back to a router in Holland. (the source is a HC2)

 

I dont understand.

 

 

Please login or register to see this attachment.

Please login or register to see this attachment.

 

edit: tagging you guys since this is so strange.

@m.roszak @A.Socha

Edited April 8, 2022 by ppeterr

[A.Socha 133]

We use ssh to provide remote access

[ppeterr 206]

16 minutes ago, A.Socha said:

We use ssh to provide remote access

 

Thanks for your reply,

 

So, this HC2 is sending a little package to your servers every few minutes just to say "i am here" ready for remote acces ?

How can someone disable that ?

[A.Socha 133]

Yes it is keep alive operation

 

In General tab find option remote access (turn it off) then  you will kill ssh connection to our servers, but you must remember then some function will not work

[ppeterr 206]

1 hour ago, A.Socha said:

Yes it is keep alive operation

 

In General tab find option remote access (turn it off) then  you will kill ssh connection to our servers, but you must remember then some function will not work

 

Great, i told them to turn it of. Its not needed so i think its better to turn it of anyway.