[rescue] SGI fw_sshd and security

Phil Schilling phils at gcstech.net
Fri Mar 5 14:47:20 CST 2004


On Fri, 5 Mar 2004 11:46:00 -0500
Dave McGuire <mcguire at neurotica.com> wrote:

> On Mar 5, 2004, at 11:41 AM, Meelis Roos wrote:
> >>  sshd[4484]: Did not receive identification string from
> >80.116.0.117
> >
> > Somebody connected and then disconnected without sending anything.
> > A portscan usually does this.
> >
> > So this log entry is not a problem to worry about.
> 
>    I'm feeling a strong temptation to fire off an nmap against
>    Shel's 
> machine from about eight different machines on different parts of
> the Internet, just to keep him on his toes. :)
> 
I can hit him from over 50 non related ip addresses.  We can create a
panic that should last all weekend.

Phil


-- 
Phil Schilling
GCS Tech



More information about the rescue mailing list