Dropbear...

[icornish]

Ever since the recent spate of attacks and things, I cranked up my logging (and changed credentials). I now get in the logs:-
Jan 16 05:57:54 dropbear[2867]: Child connection from 192.168.x.x:60384
Jan 16 05:57:54 dropbear[2867]: Early exit: Failed socket address: Transport endpoint is not connected
every hour, from my main PC.

What's causing this, and how can I reduce it?

 

[RMerlin]

Look at what is on that PC, something on it is trying to connect to your router over SSH. Could be a security suite scanning your network, or could be a malware also scanning your network.

 

[icornish]

Ah yes, that was it... I had relented and let the AV suite upgrade itself, and forgot to remove the Network scanner.
Thanks Merlin...