From owner-freebsd-questions Fri Jan 11 15:23:27 2002 Delivered-To: freebsd-questions@freebsd.org Received: from stereophonic.noops.org (adsl-63-195-97-84.dsl.snfc21.pacbell.net [63.195.97.84]) by hub.freebsd.org (Postfix) with SMTP id 4E0E637B404 for ; Fri, 11 Jan 2002 15:23:25 -0800 (PST) Received: (qmail 82061 invoked by uid 1000); 11 Jan 2002 23:23:26 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 11 Jan 2002 23:23:26 -0000 Date: Fri, 11 Jan 2002 15:23:26 -0800 (PST) From: Thomas Cannon To: brain_damaged Cc: Subject: Re: error message and meaning of it and is it a security crack attemp In-Reply-To: <200201111800.AA42467666@florida-wireless.com> Message-ID: <20020111152113.L81612-100000@stereophonic.noops.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG You were port scanned, or someone at the very least connected to port 22 on your box. That doesn't mean that they got in, or even that they tried. Something just opened that port and dropped it -- someone could have mis-typed an IP and hit control-C just as they were connecting, or someone might have scanned you intentionally for malicious reasons. Who knows? Thomas On Fri, 11 Jan 2002, brain_damaged wrote: > Unusual System Events > =-=-=-=-=-=-=-=-=-=-= > Jan 11 23:43:23 games sshd[6496]: Did not receive ident string from 208.16.89.10. > > since this says sshd does it mean someone attempted to try to login authorized ? > > thanks > md > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message