On Tuesday 11 December 2001 22:12, P Ferwerda wrote: > I've been seeing this on my logcheck. > > Unusual System Events > =-=-=-=-=-=-=-=-=-=-= > Dec 10 22:49:20 www sshd[31783]: Did not receive identification string from > 61.175.252.139 > > A reverse IP lookup indicates that this ip address is: > > CHINANET Zhejiang province network > Data Communication Division > China Telecom > CN > > I'm running OpenSSH 3.0.2p1. Is there anything else that I should be doing > to protect against whatever the ip address is trying to do? >
In etc/hosts.deny ALL: 61.175.252.139 or in ipchains $IPCHAINS -A input -s 61.175.252.139 -j DENY -- -Gerald _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
