Lots of scans by SSH-1.0-SSH_Version_Mapper

From: Blake R. Swopes (bswopesat_private)
Date: Mon Jan 28 2002 - 09:53:46 PST

Next message: Chris Wilkes: "UDP port 500 traffic from two clients"

Previous message: Stanislav N. Vardomskiy: "Re: DDoS attack."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Been seeing a lot of these the last couple of days... All from european net
blocks.

Jan 26 12:44:44 netserver sshd[16765]: scanned from 212.117.200.130 with
SSH-1.0-SSH_Version_Mapper .  Don't panic.
Jan 26 12:44:44 netserver sshd[16764]: Did not receive identification string
from 212.117.200.130.

------------------------------
Blake R. Swopes
ISE Research
7345 Mission Gorge Rd, Suite K
San Diego, CA 92120
V: (619) 287-8785 x151
F: (619) 287-8795
http://www.isecorp.com




----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Chris Wilkes: "UDP port 500 traffic from two clients"
Previous message: Stanislav N. Vardomskiy: "Re: DDoS attack."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Jan 28 2002 - 10:26:32 PST