log entry question on sshd
Darrell Shandrow
nu7i at azboss.net
Tue Jan 22 22:43:41 EST 2002
Hi Raul,
Hmmm, looks like a rather persistent port scan, in my estimation.
At 11:04 PM 1/20/2002 -0600, you wrote:
>Hey gang. I received this log entry and am not sure if it's a portscan
>of some type or not. Anyone seen this before?
>
>Jan 20 19:23:25 saidin sshd[4209]: scanned from 195.178.168.129 with
>+SSH-1.0-SSH_Version_Mapper. Don't panic.
>Jan 20 19:24:47 saidin sshd[4216]: scanned from 195.178.168.129 with
>+SSH-1.0-SSH_Version_Mapper. Don't panic.
>Jan 20 19:26:00 saidin sshd[4220]: scanned from 195.178.168.129 with
>+SSH-1.0-SSH_Version_Mapper. Don't panic.
>
>--
>We are writing this e-mail to inform you that the mail server is down.
>Please do not call the help desk for assistance. To see the progress of
>any outage refer to your e-mail notifications.
>Raul A. Gallegos - http://www.asmodean.net
>
>_______________________________________________
>Speakup mailing list
>Speakup at braille.uwo.ca
>http://speech.braille.uwo.ca/mailman/listinfo/speakup
Best regards and happy New Year,
Darrell
Access technology consulting / network and UNIX systems administration.
More information about the Speakup
mailing list