[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Someone scanned my ssh daemon



> My Debian box:
> Connection closed by foreign host.
> tim@muffin:~> telnet xxxxxx.com 22
> Trying 203.167.224.xxxx...
> Connected to xxxxxx.com.
> Escape character is '^]'.
> SSH-2.0-OpenSSH_3.4p1 Debian 1:3.4p1-1

To be brief, I don't usually come accross that there is an exploit
for only effective to debian boxes. Plus, There are lots of ways to
learn what distribution you are running on your machine.
telnet xxxx.com 80 and do some returns and you get the info you
are running apache with php xxx support on debian box. 

This is not only ssh case.

Attachment: pgpF71ycLvHea.pgp
Description: PGP signature


Reply to: