Re: My machine is sending out ssh port scans.
From: Andrew Schulman (andrex_at_deadspam.com)
Date: 01/07/05
- Next message: Charlie Zender: "How to scp to machine with no root account?"
- Previous message: baruah: "IPTABLES FOR TRAFFIC MONITORING"
- In reply to: Shashank Khanvilkar: "My machine is sending out ssh port scans."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 7 Jan 2005 10:37:29 -0500
> My machine is doing an SSH port scan of all machines on my network.
> I tried to see of any rootkit was installed.. but chkrootkit did not
> anything..
As root, run 'netstat -anp -A inet | grep :22', assuming that the
scanning process is looking for ssh servers on port 22. This will show
you the names and process IDs of processes that are opening connections
to port 22.
-- To reply by email, replace "deadspam.com" by "alumni.utexas.net"
- Next message: Charlie Zender: "How to scp to machine with no root account?"
- Previous message: baruah: "IPTABLES FOR TRAFFIC MONITORING"
- In reply to: Shashank Khanvilkar: "My machine is sending out ssh port scans."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
