Re: Someone scanned my ssh daemon

["TiM" <tim@muppetz.com>]

I don't like the fact it has to give away I'm running Debian.

For example:

My Slackware box:
tim@muffin:~> telnet xxxxx.tsnz.net 22
Trying 203.97.131.xxx...
Connected to xxxxx.tsnz.net.
Escape character is '^]'.
SSH-1.99-OpenSSH_3.6.1p1

My Debian box:
Connection closed by foreign host.
tim@muffin:~> telnet xxxxxx.com 22
Trying 203.167.224.xxxx...
Connected to xxxxxx.com.
Escape character is '^]'.
SSH-2.0-OpenSSH_3.4p1 Debian 1:3.4p1-1

You're right, it doesn't really matter too much, a box should be secure.

But if the kiddies only have an exploit that works only on Debian woody,
they're going to know to target my box.
Make them work for their information :)

Tim