All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Help with this error: kex_exchange_identification: Connection closed by remote host
When I check my SSH Server Log I see this a lot.,
I can't find the the answer.
I see this repeatedly like 20 times.
sudo journalctl -u ssh
Dec 11 08:27:13 server1.mysite.com sshd[28038]: error: kex_exchange_identification: Connection closed by remote host
Dec 11 08:27:28 server1.mysite.com sshd[28043]: error: kex_exchange_identification: Connection closed by remote host
Dec 11 08:27:43 server1.mysite.com sshd[28049]: error: kex_exchange_identification: Connection closed by remote host
Dec 11 08:27:58 server1.mysite.com sshd[28054]: error: kex_exchange_identification: Connection closed by remote host
I running Ubuntu 20.04 with KeyHelp panel with fail2ban
I disable root login and changed SSH port 22.
I always do this, never see this error on the SSH log.
Does anybody know what it is? It's bugging me!
Comments
I don't think any authentication attempts are made here. You would have seen different errors then & fail2ban would have acted on it. These entries generally appear in logs when bots/spider services on the web scan your IP for open ports and try to identify services running on them. They just connect, try some partial TLS/SSL handshake to vaguely identity what kind of service it is (https/ftps/ssh etc) and then disconnect which results in errors like these.