Re: why do I see failed login attempts to vm on non-forwarded ports?
- In reply to: Dale Scott : "Re: why do I see failed login attempts to vm on non-forwarded ports?"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 09 Jan 2023 16:59:17 UTC
Le 05/01/2023 à 19:57, Dale Scott a écrit : > > Thanks Erwan for educating me. :-) > > IIUC, the attacker attempts an ssh login on port 3022 on the host system, which is handled by the virtualbox NAT and sent to vm client port 22 from host port e.g. 51252. > > Do I understand this correctly? Why does the host use so many different ports? > > > Cheers, > Dale > By default an outgoing connection is established with a random source port, that's why you see random source ports,