atmoz/sftp

Container is trying to reach the same Chinese IP on different ports

lazaroblanc opened this issue · 1 comments

I was going through my firewall logs and noticed your container (which I pulled from Docker Hub) trying to call the same Chinese IP address over and over again on different ports. What is going on here?

image

image

The IP address has a 100% abuse rating: https://www.abuseipdb.com/check/218.92.0.192

This looks really fishy to me and some clarification would be great.

Those are stateful connections from random ssh attacks. I oversaw those in my initial coam-through the logs. Once I took a second look it was clear to me. I feel embarassed and want to apologize for opening this issue.