Topic: ssh unauthorised access attempt ?

[Ray Mitchell]

When looking through the server messages log I see the following entry (and others with different IPs)
Sep  9 11:34:03 server sshd[28017]: Did not receive identification string from 64.91.232.203

Can anyone explain the significance or otherwise of the page contents I see when
I go to that site http://64.91.232.203
I see the following:

Hey, it worked !
The SSL/TLS-aware Apache webserver was
successfully installed on this website.
If you can see this page, then the people who own this website have just installed the Apache Web server software and the Apache Interface to OpenSSL (mod_ssl) successfully. They now have to add content to this directory and replace this placeholder page, or else point the server at their real content.

ATTENTION!
If you are seeing this page instead of the site you expected, please contact the administrator of the site involved. (Try sending mail to .) Although this site is running the Apache software it almost certainly has no other connection to the Apache Group, so please do not send mail about this site or its contents to the Apache authors. If you do, your message will be ignored.
The Apache online documentation has been included with this distribution.
Especially also read the mod_ssl User Manual carefully.

Your are allowed to use the images below on your SSL-aware Apache Web server.
Thanks for using Apache, mod_ssl and OpenSSL!


Thanks
Ray Mitchell

[chris]

this is a confirmation that you have just installed mod_ssl,,,,dont be bothered cause this message helps you if your installation was succesfull

[Guck Puppy]

Ray originally wrote :

When looking through the server messages log I see the following entry (and others with different IPs)
Sep 9 11:34:03 server sshd[28017]: Did not receive identification string from 64.91.232.203

I think this means that the computer at 64.91.232.203 attempted to make a "Secure Shell" connection to your e-smith, but they didn't send any ID.  if the IP addresses are one's you don't recognise and can't account for, it would mean unauthorized people are trying to log in remotely to your server.

G