Re: some "scanned with SSH-1.0-SSH_Version_Mapper. Don't panic." in syslog

From: Sebastian Jaenicke (tsaat_private)
Date: Sun Dec 23 2001 - 10:54:23 PST

Next message: Matthew S. Hallacy: "Re: *MAJOR SECURITY BREACH AT CCBILL**"

Previous message: Steffen Dettmer: "some "scanned with SSH-1.0-SSH_Version_Mapper. Don't panic." in syslog"
In reply to: Steffen Dettmer: "some "scanned with SSH-1.0-SSH_Version_Mapper. Don't panic." in syslog"
Next in thread: Matthew D. Close: "Re: some "scanned with SSH-1.0-SSH_Version_Mapper. Don't panic." in syslog"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi everybody,

On Sat, Dec 22, 2001 at 11:05:18PM +0100, Steffen Dettmer wrote:
[..]
> I found the following in syslogs on some servers (running
> OpenSSH):
> 
> sshd[29575]: scanned from ::ffff:62.154.180.3 with
> 	SSH-1.0-SSH_Version_Mapper.  Don't panic.
[..]
> Does anyone knows somethink about SSH-1.0-SSH_Version_Mapper? 
[..]

The software located at http://www.monkey.org/~provos/scanssh/ 
produces log entries as mentioned above.

Regards,

Sebastian
-- 
Sebastian Jaenicke
whois pgpkey-18AC0BE4at_private|perl -ne's-^certif: +--&&print'

application/pgp-signature attachment: stored

Next message: Matthew S. Hallacy: "Re: *MAJOR SECURITY BREACH AT CCBILL**"
Previous message: Steffen Dettmer: "some "scanned with SSH-1.0-SSH_Version_Mapper. Don't panic." in syslog"
In reply to: Steffen Dettmer: "some "scanned with SSH-1.0-SSH_Version_Mapper. Don't panic." in syslog"
Next in thread: Matthew D. Close: "Re: some "scanned with SSH-1.0-SSH_Version_Mapper. Don't panic." in syslog"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Dec 24 2001 - 09:00:44 PST