I recently installed
DenyHosts and after a few remote logins I noticed that
sshd: 18.104.22.168 had been added to the
host.deny file after
/var/log/auth.log showed a few
sshd: Did not receive identification string from 22.214.171.124. This appears to be
ddclient to dynamically update my ip-address to point to my hostname at
no-ip.com; something like
email@example.com so that instead of having to
ssh to a dynamic ip I can always just connect to the above host.
I don't understand why
126.96.36.199 would be trying to connect to my ssh service however, can anyone shed some light on this? Is it some kind of by product of me
ssh'ing to the no-ip hosted hostname? Is it likely to be problematic now
DenyHosts has banned it?