From owner-FreeBSD-users-jp@jp.FreeBSD.org Tue Feb 19 00:02:54 2002
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) id g1IF2sp78955;
	Tue, 19 Feb 2002 00:02:54 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from mbr.sphere.ne.jp (mbr.sphere.ne.jp [203.138.71.91])
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) with ESMTP/inet id g1IF2sW78950
	for <FreeBSD-users-jp@jp.FreeBSD.org>; Tue, 19 Feb 2002 00:02:54 +0900 (JST)
	(envelope-from ktg@mbr.sphere.ne.jp)
Received: from localhost (pl032.nas931.te-fukuoka.nttpc.ne.jp [61.197.88.32])
	by mbr.sphere.ne.jp (8.9.3+3.2W/3.7W) with ESMTP id AAA08311
	for <FreeBSD-users-jp@jp.FreeBSD.org>; Tue, 19 Feb 2002 00:02:45 +0900 (JST)
Date: Tue, 19 Feb 2002 00:02:45 +0900 (JST)
Message-Id: <20020219.000245.660915605.ktg@mbr.sphere.ne.jp>
To: FreeBSD-users-jp@jp.FreeBSD.org
From: Kazu TAKAGI (=?iso-2022-jp?B?GyRCOWJMWhsoQiAbJEIwbDktGyhC?=)
 <ktg@mbr.sphere.ne.jp>
In-Reply-To: <200202181341.g1IDfcW64588@castle.jp.FreeBSD.org>
References: <200202181341.g1IDfcW64588@castle.jp.FreeBSD.org>
X-Face:  /':hS/(KOw@c>{z~_2=|&8f):=gQ0%t@8L'[vRlNZFx+}P.R$oyjH!x#.]V)]=`L[&qq0A\
 Qi>0sr87$pX_S/&&k)zpOe>uLF!&R!G'0WE?l_{}TC0N75S$'!y\:We<"'5aSFm/P1nyR}}Wx]\CPd
 nVOng7G;Dbi(Q7NjPtgsU$/`./h4<4-bKE+Ay9GbjX4RLdtP]2IuF.YF;,to]Ajz%vw/YcaV2PGJ>q
 Nv8)&
X-Mailer: xcite1.40> Mew version 3.0.53 on XEmacs 21.4.6 (Common Lisp)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Reply-To: FreeBSD-users-jp@jp.FreeBSD.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+011218
X-Sequence: FreeBSD-users-jp 66983
Subject: [FreeBSD-users-jp 66983] Re: OpenSSH Log Message
Errors-To: owner-FreeBSD-users-jp@jp.FreeBSD.org
Sender: owner-FreeBSD-users-jp@jp.FreeBSD.org
X-Originator: ktg@mbr.sphere.ne.jp


$B$?$+$.!wJ!2,;TEl6h:_=;$G$9!%(B

>>> Mon, 18 Feb 2002 22:41:31 +0900 $B$N9o$K(B $B!V(Bkiyo$B!W!"$9$J$o$A(B
>>> kiyomizu@hkg.odn.ne.jp($B@6?eN4;J(B) $B;a[)$/(B

 kiyo> Feb 15 21:45:06 myhost sshd[50181]: scanned from xxx.xxx.xxx.xxx with SSH-1.0-SSH_Version_Mapper.  Don't panic.
 kiyo> Feb 15 22:31:34 myhost sshd[86353]: Did not receive identification string from xxx.xxx.xxx.xxx

 kiyo> $B$?$V$s2?$i$+$N%"%?%C%/$r<u$1$F$$$k$N$@$H;W$$$^$9$,!"$I$N$h$&$J%"%?%C%/(B
 kiyo> $B$J$N$G$7$g$&$+!)4m81$J$b$N$J$N$G$7$g$&$+!)(B

Don't panic!! 

# ;-p

 kiyo> sshd $B$rN)$A>e$2$k$N$r$d$a$k$Y$-$J$N$G$7$g$&$+!)(B

 kiyo> OS $B$O!"(BFreeBSD 3.5.1-RELEASE $B$G(B ppp $B$K$h$k>o;~@\B3!"(Bipfw $B$G%U%#%k%?%j(B
 kiyo> $B%s%0$7$F$$$^$9!#(B

ipfw $B$G(B port 22 $B$r%U%#%k%?%j%s%0$7$F$$$k$K$b4X$o$i$:(B... $B$H$$$&$3$H$G$7$g(B
$B$&$+!)(B $B2?$r%U%#%k%?%j%s%0$7$F$$$k$N$+L\E*8l$,$J$$$N$G!$$3$l$@$1$G$O0U(B
$BL#ITL@$G$9$M!%(B

$B$=$b$=$b(B{$BC/$N(B|$B2?$N(B}$B$?$a$K(B sshd $B$r>e$2$k$N$+$r@bL@$7$FLc$($l$P$b$&$A$g$C(B
$B$H$^$H$b$J2sEz$,4|BT$G$-$k$+$b$7$l$^$;$s!%$$$:$l$K$;$h!$>o;~@\B3$r$J$5(B
$B$k$N$J$i!$$=$l$J$j$N3P8g$HCN<1$r$b$C$FNW$^$l$?J}$,$h$m$7$$$N$G$O$J$$$+(B
$B$H!%(B

$B$H!$$3$l$@$1$G$O2?$J$N$G!$<XB-$J$,$i!$(Bipfw $B$r$*;H$$$J$i!$(B
IPFIREWALL_VERBOSE $B$rM-8z$K$7$F(B kernel $B$r:F9=C[$7(B ($B4{$KM-8z$K$7$F$$$l(B
$B$PL5;k$7$F$/$@$5$$(B)$B!$(Blog $B%-!<%o!<%I$r3hMQ$7$F!$30It$+$iFbIt$X$NJD$8$?(B
$B%]!<%H(B ($B$d(B IP address) $B$KBP$9$k(B scan $B$r4Q;!$7$F$_$k$H$$$$$G$7$g$&!%62(B
$B$i$/A[A|0J>e$K30It$+$i$N(B scan $B$,$"$k$3$H$,J,$+$k$H;W$$$^$9!%(B

# $B$,!$0l!9(B ML $B$G(B $BJs9p$9$k$N$O$d$a$F$/$@$5$$$M(B ;-p

---
$B$?$+$.$+$:$R$m!w9aDG1XA0(B
(ktg@mbr.sphere.ne.jp)
PGP fpr: 86C7 AC6A 5988 F7CD B6CA  83D6 8489 4197 CC7B 321E
