[Dshield] SSHD scans

David Allardyce dave at pod13.com
Fri Nov 30 14:57:27 GMT 2001


Has anyone noticed an increase in SSHD scans across the network?

I had this show up on two machines listening on port 22.  The two messages
were 4 seconds apart.

sshd: warning: /etc/hosts.allow, line 23: can't verify hostname:
getaddrinfo(fw1.clv.oh.voyager.net, AF_INET) failed

I've heard rumor that a script is out there which exploits OpenSSH 2.2 and
lesser, but that's a pretty old version.

Dave





More information about the list mailing list