seeing random ssh/dropbear connection attempts from some local windows machines in logs

[lgkahn]

i am seeing attempts from machines that i dont think should be attempting ssh connections.. they dont seem valid or like a hack attempt as no username/password seems to be passed.. see attaqchment of attempt vs valid attempt with usersname.
virus scanning on the machines show nothing.. any ideas what is going on? maybe some sort of security (norton or malwarebytes periodic security scanning?)

thanks

 

[ColinTaylor]

What is the 192.168.10.x network used for (assuming you're using /24 netmasks)?

 

[Ripshod]

The other question is what device has that mac, 3c:e9:f7:65:62:e7?

 

[lgkahn]

i am seeing attempts from machines that i dont think should be attempting ssh connections.. they dont seem valid or like a hack attempt as no username/password seems to be passed.. see attaqchment of attempt vs valid attempt with usersname.
virus scanning on the machines show nothing.. any ideas what is going on? maybe some sort of security (norton or malwarebytes periodic security scanning?)

thanks

What is the 192.168.10.x network used for (assuming you're using /24 netmasks)?

all my local network.. i have a 255.255.254.0 mask so both 10 and 11 networks