Re: some "scanned with SSH-1.0-SSH_Version_Mapper. Don't panic." in syslog

From: Sebastian Jaenicke (tsa@jaenicke.org)
Date: 12/23/01 

Date: Sun, 23 Dec 2001 19:54:23 +0100
From: Sebastian Jaenicke <tsa@jaenicke.org>
To: incidents@securityfocus.com

Hi everybody,

On Sat, Dec 22, 2001 at 11:05:18PM +0100, Steffen Dettmer wrote:
[..]
> I found the following in syslogs on some servers (running
> OpenSSH):
>
> sshd[29575]: scanned from ::ffff:62.154.180.3 with
> SSH-1.0-SSH_Version_Mapper. Don't panic.
[..]
> Does anyone knows somethink about SSH-1.0-SSH_Version_Mapper?
[..]

The software located at http://www.monkey.org/~provos/scanssh/
produces log entries as mentioned above.

Regards,

Sebastian 

-- 
Sebastian Jaenicke
whois pgpkey-18AC0BE4@whois.ripe.net|perl -ne's-^certif: +--&&print'

Relevant Pages

  • Re: is one SSH better then the other?
    ... My company is rolling out SSH to all the servers ... both F-Secure and OpenSSH are open source in the sense that both ...
    (comp.security.ssh)
  • Re: Fwd: Article Announcement - Demystifying Penetration Testing
    ... > them (and I feel that should be the goal of any pen-test). ... > detected any of your intrusions, grab the logs from the servers you ... > report, "we broke into these servers, and these are the log entries ...
    (Pen-Test)
  • Re: Agent Forwarding Question for the list
    ... Most of the documentation I found suggests it's possible to do this, and I can already do it with ssh-3.2.9-1 on our old setup. ... I was determined to ask the experts in case it was a common mistake or something that simply is not possible under openssh. ... Say in the ideal setup for development servers I'd have a cronuser, scriptuser, monitoruser, cvsuser, and root all configured with my public key and that I could jump in and out of each not only from my own Linux Desktop, but through each user to each user on other servers in the development chain. ... After reading all the documentation and FAQs I could find, I had assumed ssh-agent on the desktop and agent forwarding on the servers would be sufficient, but something is blocking the forwarding, or I'm way off and this isn't how it's meant to work. ...
    (SSH)
  • Re: Upgrading OpenSSH
    ... > As it stands right now, I have two OpenBSD 3.3 servers that I need to ... > point me in the right direction of how I can update my OpenSSH packages ... Killing the parent sshd process doesn't disconnect your current ...
    (SSH)
  • Agent Forwarding Question for the list
    ... I have looked through the archives and googled this pretty thoroughly, I'm having a tough time finding someone else who has asked the same question previously. ... There's a lot of information about openssh, but surprisingly little detail about port forwarding. ... I made users and keys with openssh instead of using the old ones, put them in the accounts I wanted to jump to on multiple servers. ... I can put the password in and it works, but I think at this point it should be forwarding the key. ...
    (SSH)