Wireshark · Wireshark-users: [Wireshark-users] Very strange SSH probe

Wireshark-users: [Wireshark-users] Very strange SSH probe

From: "Michael Glenn" <MGlenn@xxxxxxxxxxxxxxx>

Date: Mon, 12 Jul 2010 09:51:49 -0400

Anyone else seeing this?

Every five to six minutes, my Linux boxes are seeing a single connection attempt via SSH. What makes this unusual is that the user ID is always 'test1' and the source IPs are all over the map; I don't think I've seen the same IP address twice yet.

Interesting, yes?

Follow-Ups:
- Re: [Wireshark-users] Very strange SSH probe
  - From: Martin Visser
- Re: [Wireshark-users] Very strange SSH probe
  - From: Andrew Hood

References:
- [Wireshark-users] question, how to output specific fields in a complex packet using tshark command line
  - From: damker

Prev by Date: [Wireshark-users] question, how to output specific fields in a complex packet using tshark command line
Next by Date: [Wireshark-users] HowTo decode messages as X.411?
Previous by thread: [Wireshark-users] question, how to output specific fields in a complex packet using tshark command line
Next by thread: Re: [Wireshark-users] Very strange SSH probe
Index(es):
- Date
- Thread