LFD reporting Historical SSH logins
Posted: 17 Jul 2022, 06:46
1-2 times per days I am getting a flood of SSH alerts for user/root logins to ssh but looking at the dates they go back several months and are not "current" logins.
The first time this happened I thought I was compromised but it's been 2 weeks now and I am growing tired of the random floods of email. Any ideas?
The first time this happened I thought I was compromised but it's been 2 weeks now and I am growing tired of the random floods of email. Any ideas?