I was looking at the log for Sagemcom Gigaset SX686 device and noticed repeated entries that look like this:
Jun 2 14:25:47 War <EVENT> scm: 048-00-00 Unknown user tried to connect via SSH
Jun 2 14:25:49 War <EVENT> scm: 048-00-00 Wrong password for user root
Jun 2 14:25:51 War <EVENT> scm: 048-00-00 Wrong password for user root
Jun 2 14:25:54 War <EVENT> scm: 048-00-00 Wrong password for user root
Jun 2 14:25:56 War <EVENT> scm: 048-00-00 Wrong password for user root
What does it mean and should I be concerned?
Note that I have setup Mac address filtering on the device and whitelisted only two mac addresses. Nothing is connected to ethernet ports.