Re: Anyone else seeing SSH scans?

[Merlijn Tishauser <merlijn () begeleidingentraining nl>]

On 29-jul-04, at 18:52, Pavel Kankovsky wrote:

> They must be using a custom SSH client because it says "Bye Bye" when 
> it
> disconnects from the server:
>
> Jul 27 07:44:47 mbox sshd[3821]: Received disconnect from 
> 61.193.179.162: 11: Bye Bye
> Jul 27 07:44:50 mbox sshd[3822]: Received disconnect from 
> 61.193.179.162: 11: Bye Bye
> Jul 27 21:21:17 mbox sshd[27838]: Received disconnect from 
> 216.99.211.35: 11: Bye Bye
> Jul 27 21:21:20 mbox sshd[27839]: Received disconnect from 
> 216.99.211.35: 11: Bye Bye
> Jul 28 17:43:35 mbox sshd[28247]: Received disconnect from 
> 211.219.5.170: 11: Bye Bye
> Jul 28 17:43:38 mbox sshd[28248]: Received disconnect from 
> 211.219.5.170: 11: Bye Bye
> Jul 29 05:31:27 mbox sshd[14330]: Received disconnect from 
> 131.104.49.33: 11: Bye Bye
> Jul 29 05:31:29 mbox sshd[14331]: Received disconnect from 
> 131.104.49.33: 11: Bye Bye

Isn't it Putty (the windows ssh client ) which uses the phrase bye bye 
when disconnecting?

www.chiark.greenend.org.uk/~sgtatham/putty/

my 0.02 cents

Merlijn