Score:-1

why is port 35128 associated with ssh2?

as flag

I failed to login to my root account over ssh, and when doing so I noticed this interesting line in auth.log:

"Failed password for root from [ip address] port 35128 ssh2"

I'm not so interested in the actual failure to access root (I found a solution to this), I'm more interested in why this is going to/coming from port 35128 since ufw is set to deny incoming traffic on ports that aren't 80 and 22 by default.

I'm very new to working with servers, so I'm interested to see what this is.

Score:3
in flag

It's the ephemeral client port. This port is always randomly chosen.

This is not specific to SSH, it's a TCP mechanism and happens with every protocol.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.