Re: Server attack ?

[L Nehring]

I get these messages across all of my exposed servers. People are knocking on the door to see if they can get in. Sometimes it's an automated scan to gather data to see who is running what version of SSH. (Ref: http://www.openssh.org/usage/index.html)

But, I think that the question is better asked on a SSH list about why the connection was left open for that long.
http://www.openssh.org/list.html

r,
Lance
www.newparticles.com

Robby wrote:

Hello All,

in my server system log (/var/log/messages) i read:
Sep 7 13:05:39 sshd[18706]: Did not receive identification string from \ 144.16.93.115
Sep 7 14:01:58 sshd[21432]: Connection closed by 144.16.93.115

Does 144.16.93.115 stand in my server about 1 h?
I use OpenSSL/0.9.6h. Do you think it's time to upgrade?

Thank you in advance.
Robby
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]

smime.p7s

Description: S/MIME Cryptographic Signature