secure:Jul 20 11:11:24 DL140RH sshd: Connection closed by 18.104.22.168
in my /var/log/secure without there being any record of a connection? I have grepped for it in secure .1 .2 .3 and .4. There has been a reboot during secure.1 so it would have had to occur after that obviously. I am running Centos 4.2 with the 2.6.9-78.0.22.ELsmp kernel.