[Dshield] SSHD scans
dave at pod13.com
Fri Nov 30 14:57:27 GMT 2001
Has anyone noticed an increase in SSHD scans across the network?
I had this show up on two machines listening on port 22. The two messages
were 4 seconds apart.
sshd: warning: /etc/hosts.allow, line 23: can't verify hostname:
getaddrinfo(fw1.clv.oh.voyager.net, AF_INET) failed
I've heard rumor that a script is out there which exploits OpenSSH 2.2 and
lesser, but that's a pretty old version.
More information about the list