Mailinglist Archive: opensuse-security (145 mails)

< Previous Next >
Re: SSH-Log Entries
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
  • Date: Fri, 12 Nov 2004 11:50:32 +0100 (CET)
  • Message-id: <Pine.LNX.4.61.0411121148480.21788@xxxxxxxxxxxxxxxxx>
On Thu, 11 Nov 2004, Kai Pfeiffer wrote:

MY QUESTION IS: WHAT DO THIS TWO ENTRIES MEAN?
--snip--
Nov 11 22:09:40 xxx sshd[4132]: Connection from ::ffff:xxx.xxx.xxx.xxx port
48806
Nov 11 22:09:40 xxx sshd[4132]: Did not receive identification string from
::ffff:xxx.xxx.xxx.xxx
--snip--

This is what gets logged when someone connects to your tcp port 22 without sending the ssh identification string, i.e. not speaking the ssh protocol.

You can test it with:

telnet 127.0.0.1 22

c'ya
sven

--

The Internet treats censorship as a routing problem, and routes around it.
(John Gilmore on http://www.cygnus.com/~gnu/)

< Previous Next >
References