RE: Increase in SSH scans

Date: 10/02/02

Date: Wed, 02 Oct 2002 04:08:11 -0300 (BRT)
To: "Keith T. Morgan" <>

On 30-Sep-2002 Keith T. Morgan wrote:
># grep 'Sep\ 2[2-9]' /var/log/messages | grep 'DPT=22' | wc

Please, try something like:

# grep 'Sep 2[2-9]' /var/log/messages | grep 'PROTO=TCP .* DPT=22 ' | wc -l

This will avoid mixing UDP port 22 or ports 22* with TCP port 22.

Paulo F. Sedrez
Diretor de Tecnologia
Weavers Network Consulting Tel/Fax: +55-21-2239-3190
Thought of the day:

"Pascal is Pascal is Pascal is dog meat."
                -- M. Devine and P. Larson, Computer Science 340

This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see:

Relevant Pages