Re: sshd fatal - no matching cipher found

Looks like a bot attack. Yes, port 22 usually, unless you reconfigured
sshd. I don't think there's an exit program.
sshd logs, and on Unix system logging level is set in /etc/ssh/sshd_config
and the log is in the directory /var/log

On Wed, Feb 19, 2020 at 10:10 AM Steve Richter <stephenrichter@xxxxxxxxx>
wrote:

so this message is related to SSH traffic coming into the system? is that
always port 22?

was hoping for an exit program that is associated with the "fatal:
ssh_dispatch_run_fatal" message.

On Wed, Feb 19, 2020 at 11:30 AM Jack Woehr <
jwoehr@xxxxxxxxxxxxxxxxxxxxxxxx>
wrote:

You need a properly configured firewall.

On Wed, Feb 19, 2020 at 9:05 AM Steve Richter <stephenrichter@xxxxxxxxx>
wrote:

getting this message in QSYSOPR:

Message . . . . : sshd[128117]: fatal: ssh_dispatch_run_fatal:

Connection

to
185.202.1.240: no matching cipher found


did a whois 185.202.1.240 and the results say it is a problem IP in

Russia.

the message says it was sent by program QP2USER2.

how do I more closely monitor this type of message ?

thanks,

-Steve
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
Jack Woehr
Absolute Performance, Inc.
12303 Airport Way, Suite 100
Broomfield, CO 80021

NON-DISCLOSURE NOTICE: This communication including any and all
attachments is for the intended recipient(s) only and may contain
confidential and privileged information. If you are not the intended
recipient of this communication, any disclosure, copying further
distribution or use of this communication is prohibited. If you received
this communication in error, please contact the sender and delete/destroy
all copies of this communication immediately.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com