Security Incidents mailing list archives

Re: some "scanned with SSH-1.0-SSH_Version_Mapper. Don't panic." in syslog

From: Sebastian Jaenicke <tsa () jaenicke org>
Date: Sun, 23 Dec 2001 19:54:23 +0100

Hi everybody,

On Sat, Dec 22, 2001 at 11:05:18PM +0100, Steffen Dettmer wrote:
[..]

I found the following in syslogs on some servers (running
OpenSSH):

sshd[29575]: scanned from ::ffff:62.154.180.3 with
      SSH-1.0-SSH_Version_Mapper.  Don't panic.

[..]

Does anyone knows somethink about SSH-1.0-SSH_Version_Mapper?

[..]

The software located at http://www.monkey.org/~provos/scanssh/ 
produces log entries as mentioned above.

Regards,

Sebastian
-- 
Sebastian Jaenicke
whois pgpkey-18AC0BE4 () whois ripe net|perl -ne's-^certif: +--&&print'

Attachment: _bin
Description:

Current thread:

some "scanned with SSH-1.0-SSH_Version_Mapper. Don't panic." in syslog Steffen Dettmer (Dec 23)
- Re: some "scanned with SSH-1.0-SSH_Version_Mapper. Don't panic." in syslog Sebastian Jaenicke (Dec 24)
- Re: some "scanned with SSH-1.0-SSH_Version_Mapper. Don't panic." in syslog Matthew D. Close (Dec 24)
  - Re: some "scanned with SSH-1.0-SSH_Version_Mapper. Don't panic." in syslog Jose Nazario (Dec 28)