log entry question on sshd

Darrell Shandrow nu7i at azboss.net
Tue Jan 22 22:43:41 EST 2002


Hi Raul,

Hmmm, looks like a rather persistent port scan, in my estimation.

At 11:04 PM 1/20/2002 -0600, you wrote:
>Hey gang.  I received this log entry and am not sure if it's a portscan
>of some type or not.  Anyone seen this before?
>
>Jan 20 19:23:25 saidin sshd[4209]: scanned from 195.178.168.129 with
>+SSH-1.0-SSH_Version_Mapper.  Don't panic.
>Jan 20 19:24:47 saidin sshd[4216]: scanned from 195.178.168.129 with
>+SSH-1.0-SSH_Version_Mapper.  Don't panic.
>Jan 20 19:26:00 saidin sshd[4220]: scanned from 195.178.168.129 with
>+SSH-1.0-SSH_Version_Mapper.  Don't panic.
>
>--
>We are writing this e-mail to inform you that the mail server is down.
>Please do not call the help desk for assistance.  To see the progress of
>any outage refer to your e-mail notifications.
>Raul A. Gallegos - http://www.asmodean.net
>
>_______________________________________________
>Speakup mailing list
>Speakup at braille.uwo.ca
>http://speech.braille.uwo.ca/mailman/listinfo/speakup

Best regards and happy New Year,
Darrell
Access technology consulting / network and UNIX         systems administration.





More information about the Speakup mailing list