I recently installed
DenyHosts and after a few remote logins I noticed that
sshd: 184.108.40.206 had been added to the
host.deny file after
/var/log/auth.log showed a few
sshd: Did not receive identification string from 220.127.116.11. This appears to be
ddclient to dynamically update my ip-address to point to my hostname at
no-ip.com; something like
firstname.lastname@example.org so that instead of having to
ssh to a dynamic ip I can always just connect to the above host.
I don't understand why
18.104.22.168 would be trying to connect to my ssh service however, can anyone shed some light on this? Is it some kind of by product of me
ssh'ing to the no-ip hosted hostname? Is it likely to be problematic now
DenyHosts has banned it?