Re: Anyone else seeing SSH scans?

From: Pavel Kankovsky (peak_at_argo.troja.mff.cuni.cz)
Date: 07/29/04

  • Next message: Merlijn Tishauser: "Re: Anyone else seeing SSH scans?" 
    Date: Thu, 29 Jul 2004 18:52:33 +0200 (MET DST)
To: incidents@securityfocus.com

    They must be using a custom SSH client because it says "Bye Bye" when it
    disconnects from the server:

    Jul 27 07:44:47 mbox sshd[3821]: Received disconnect from 61.193.179.162: 11: Bye Bye
    Jul 27 07:44:50 mbox sshd[3822]: Received disconnect from 61.193.179.162: 11: Bye Bye
    Jul 27 21:21:17 mbox sshd[27838]: Received disconnect from 216.99.211.35: 11: Bye Bye
    Jul 27 21:21:20 mbox sshd[27839]: Received disconnect from 216.99.211.35: 11: Bye Bye
    Jul 28 17:43:35 mbox sshd[28247]: Received disconnect from 211.219.5.170: 11: Bye Bye
    Jul 28 17:43:38 mbox sshd[28248]: Received disconnect from 211.219.5.170: 11: Bye Bye
    Jul 29 05:31:27 mbox sshd[14330]: Received disconnect from 131.104.49.33: 11: Bye Bye
    Jul 29 05:31:29 mbox sshd[14331]: Received disconnect from 131.104.49.33: 11: Bye Bye

    (Please note OpenSSH does not log this info unless LogLevel >= VERBOSE.)

    --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ]
    "Resistance is futile. Open your source code and prepare for assimilation."

  • Next message: Merlijn Tishauser: "Re: Anyone else seeing SSH scans?"

    Relevant Pages

    • Re: Damn Blizzard
      ... Assuming you know how Blizzard spends the money they make does not equal ... Disconnects can equal 45 min queue. ... And it was due to scheduled server ... folks have like crashes and locked up machines are due to driver/OS issues. ...
      (alt.games.warcraft)
    • Re: XP Pro Client is being disconnected
      ... the cause of intermittent disconnects. ... Please try to disjoin and rejoin the client to the domain. ... Recreate the computer account from Server Management> Client Computers ... Microsoft CSS Online Newsgroup Support ...
      (microsoft.public.windows.server.sbs)
    • Re: Mac suddenly disconnected from Windows 2003 Server
      ... Connections can be slept on a per connection basis - the Mac client may or ... monitor tool on the server and looking at the time stamps of the traffic ... >> Most likely the client is sleeping the connection and the server> disconnects>> after not hearing from the client for 2 minutes. ...
      (microsoft.public.win2000.macintosh)
    • Re: Error message, "Terminal Services Client Disconnected"
      ... >Are you disconnected after a couple of minutes of idle ... >MCSE, CCEA, Microsoft MVP - Terminal Server ... >> (average time between disconnects). ...
      (microsoft.public.win2000.termserv.apps)
    • RE: Mapped Drive Connection to Network Share is being disconnected
      ... I did apply the changes to the registry to both client and servers. ... > steps which mentioned in the KB297684 on the server side. ... > before it disconnects a mapped network drive. ...
      (microsoft.public.windowsxp.help_and_support)