[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] Did not receive identification string
- Subject: Re: [cobalt-security] Did not receive identification string
- From: Gerald Waugh <gerald@xxxxxxxxx>
- Date: Tue, 11 Dec 2001 22:33:58 -0500
- Organization: Front Street Networks LLC
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
On Tuesday 11 December 2001 22:12, P Ferwerda wrote:
> I've been seeing this on my logcheck.
>
> Unusual System Events
> =-=-=-=-=-=-=-=-=-=-=
> Dec 10 22:49:20 www sshd[31783]: Did not receive identification string from
> 61.175.252.139
>
> A reverse IP lookup indicates that this ip address is:
>
> CHINANET Zhejiang province network
> Data Communication Division
> China Telecom
> CN
>
> I'm running OpenSSH 3.0.2p1. Is there anything else that I should be doing
> to protect against whatever the ip address is trying to do?
>
In etc/hosts.deny
ALL: 61.175.252.139
or in ipchains
$IPCHAINS -A input -s 61.175.252.139 -j DENY
--
-Gerald