Before jumping to conclusions at red text, let's look around. I familiarize myself with the flow of the traffic and patterns. I've never troubleshooted SSH traffic before, but I'm going to list you some of what I start to observe. Importantly, I find when it was normal.