Security Incidents mailing list archives
Re: Anyone else seeing SSH scans?
From: Merlijn Tishauser <merlijn () begeleidingentraining nl>
Date: Mon, 2 Aug 2004 19:33:18 +0200
On 29-jul-04, at 18:52, Pavel Kankovsky wrote:
They must be using a custom SSH client because it says "Bye Bye" when itdisconnects from the server:Jul 27 07:44:47 mbox sshd[3821]: Received disconnect from 61.193.179.162: 11: Bye Bye Jul 27 07:44:50 mbox sshd[3822]: Received disconnect from 61.193.179.162: 11: Bye Bye Jul 27 21:21:17 mbox sshd[27838]: Received disconnect from 216.99.211.35: 11: Bye Bye Jul 27 21:21:20 mbox sshd[27839]: Received disconnect from 216.99.211.35: 11: Bye Bye Jul 28 17:43:35 mbox sshd[28247]: Received disconnect from 211.219.5.170: 11: Bye Bye Jul 28 17:43:38 mbox sshd[28248]: Received disconnect from 211.219.5.170: 11: Bye Bye Jul 29 05:31:27 mbox sshd[14330]: Received disconnect from 131.104.49.33: 11: Bye Bye Jul 29 05:31:29 mbox sshd[14331]: Received disconnect from 131.104.49.33: 11: Bye Bye
Isn't it Putty (the windows ssh client ) which uses the phrase bye bye when disconnecting?
www.chiark.greenend.org.uk/~sgtatham/putty/ my 0.02 cents Merlijn
Current thread:
- Re: Anyone else seeing SSH scans? Pavel Kankovsky (Aug 02)
- Re: Anyone else seeing SSH scans? Merlijn Tishauser (Aug 02)
- Re: Anyone else seeing SSH scans? John Hewitt (Aug 03)
- Re: Anyone else seeing SSH scans? Chris Boyd (Aug 05)
- Re: Anyone else seeing SSH scans? Klaus Lichtenwalder (Aug 06)
- Re: Anyone else seeing SSH scans? John Hewitt (Aug 03)
- Re: Anyone else seeing SSH scans? Merlijn Tishauser (Aug 02)