Re: Connection closed by [IP] port [port] [preauth]

2020-02-29 Thread Didar Hossain
On Wed, Feb 26, 2020 at 08:49:28AM +0100, Klaus Singvogel wrote: > deloptes wrote: > > +1 :( and I am not using standard port 22, so they scanned all 3 ports > > and found out what is open (well filtered) and now are trying to do brute > > force on SSH. Others are trying to exploit apache/php &

Re: Connection closed by [IP] port [port] [preauth]

2020-02-25 Thread Klaus Singvogel
deloptes wrote: > +1 :( and I am not using standard port 22, so they scanned all 3 ports > and found out what is open (well filtered) and now are trying to do brute > force on SSH. Others are trying to exploit apache/php & Co. I'm using portsentry against this: https://packages.debian.org/bust

Re: Connection closed by [IP] port [port] [preauth]

2020-02-25 Thread deloptes
Tixy wrote: >> Since February 11th at 00:25:09, I am getting the following every 12 >> secondes: >> >> Feb 11 00:25:09 box sshd[17733]: Connection closed by 118.126.105.120 >> port 54422 [preauth] > > I'm getting that too. +1 :( and I am not using st

Re: Connection closed by [IP] port [port] [preauth]

2020-02-25 Thread steve
Le 24-02-2020, à 15:51:53 -0500, Dan Ritter a écrit : steve wrote: Hi there, Since February 11th at 00:25:09, I am getting the following every 12 secondes: Feb 11 00:25:09 box sshd[17733]: Connection closed by 118.126.105.120 port 54422 [preauth] And when I say every 12 seconds, it is

Re: Connection closed by [IP] port [port] [preauth]

2020-02-24 Thread Tixy
On Mon, 2020-02-24 at 21:38 +0100, steve wrote: > Hi there, > > Since February 11th at 00:25:09, I am getting the following every 12 > secondes: > > Feb 11 00:25:09 box sshd[17733]: Connection closed by 118.126.105.120 port > 54422 [preauth] I'm getting that too.

Re: Connection closed by [IP] port [port] [preauth]

2020-02-24 Thread john doe
On 2/24/2020 9:38 PM, steve wrote: > Hi there, > > Since February 11th at 00:25:09, I am getting the following every 12 > secondes: > > Feb 11 00:25:09 box sshd[17733]: Connection closed by 118.126.105.120 > port 54422 [preauth] > > And when I say every 12 seconds, it

Re: Connection closed by [IP] port [port] [preauth]

2020-02-24 Thread Dan Ritter
steve wrote: > Hi there, > > Since February 11th at 00:25:09, I am getting the following every 12 > secondes: > > Feb 11 00:25:09 box sshd[17733]: Connection closed by 118.126.105.120 port > 54422 [preauth] > > And when I say every 12 seconds, it is really every 12

Connection closed by [IP] port [port] [preauth]

2020-02-24 Thread steve
Hi there, Since February 11th at 00:25:09, I am getting the following every 12 secondes: Feb 11 00:25:09 box sshd[17733]: Connection closed by 118.126.105.120 port 54422 [preauth] And when I say every 12 seconds, it is really every 12 seconds, and this is now going on for more than 13 days

Re: (ssh) Connection closed by

2015-03-30 Thread Peter Viskup
ne > debug2: mac_setup: setup hmac-sha1 > debug1: kex: client->server 3des-cbc hmac-sha1 none > debug2: bits set: 502/1024 > debug1: sending SSH2_MSG_KEXDH_INIT > debug1: expecting SSH2_MSG_KEXDH_REPLY > Connection closed by IP > > any idea to solve? > > Thanks! > &

(ssh) Connection closed by

2015-03-30 Thread Pol Hallen
g1: sending SSH2_MSG_KEXDH_INIT debug1: expecting SSH2_MSG_KEXDH_REPLY Connection closed by IP any idea to solve? Thanks! Pol -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.deb

Re: ssh connection closed

2004-04-16 Thread Vincent Lefevre
On 2004-04-16 01:26:52 -0700, Karsten M. Self wrote: > Could be you've got an intermediate router that's dropping you, > possibly after ten minutes' idle time. If this is possible, then it could probably be the case, since the problems appeared after moving to a different ADSL connection (using a

Re: ssh connection closed

2004-04-16 Thread Karsten M. Self
on Tue, Apr 13, 2004 at 04:42:40PM +0200, Vincent Lefevre ([EMAIL PROTECTED]) wrote: > Could someone explain the following behavior, i.e. the fact that the > ssh connection closes after 10 minutes? Until yesterday, I didn't > have any problem (but my machine ay isn't connected by the same ADSL > ac

ssh connection closed

2004-04-13 Thread Vincent Lefevre
Could someone explain the following behavior, i.e. the fact that the ssh connection closes after 10 minutes? Until yesterday, I didn't have any problem (but my machine ay isn't connected by the same ADSL account). TIA. ay:~> ssh -vvv loria OpenSSH_3.8p1 Debian 1:3.8p1-2, SSH protocols 1.5/2.0, Ope

"connection closed by foreign host" can't telnet or pop a foreign server

2003-10-26 Thread Shawn Lindsay
I can reach it on the web. It can be reached by telnet and pop from another machine (an ibook). My firewall (guarddog) allows telnet. Other servers can be telneted into and popped. The server I can't reach is a polaris. I'm new to dsl and have a new box and I'm rather ignorant of Debian and

Re: ssh_exchange_identification: Connection closed by remote host PART II

2002-03-25 Thread Dimitri Maziuk
* Nathan E Norman ([EMAIL PROTECTED]) spake thusly: > On Mon, Mar 25, 2002 at 09:57:13AM -0600, Dimitri Maziuk wrote: > > > Curiosity just bit me in the butt. Where does the .in-addr.arpa come > > > from? > > > > From the way bind works. See e.g. O'Reilly's "DNS and Bind". > > Well, er, it's n

Re: ssh_exchange_identification: Connection closed by remote host PART II

2002-03-25 Thread Nathan E Norman
On Mon, Mar 25, 2002 at 09:57:13AM -0600, Dimitri Maziuk wrote: > > Curiosity just bit me in the butt. Where does the .in-addr.arpa come > > from? > > From the way bind works. See e.g. O'Reilly's "DNS and Bind". Well, er, it's not there because of the way BIND works. Rather, BIND works that w

Re: ssh_exchange_identification: Connection closed by remote host PART II

2002-03-25 Thread Dimitri Maziuk
* Gary Turner ([EMAIL PROTECTED]) spake thusly: > On Sun, 24 Mar 2002 18:29:39 -0600, Dimitri Maziuk wrote: > > >* Gary Turner ([EMAIL PROTECTED]) spake thusly: > >> On Sun, 24 Mar 2002 13:12:56 -0600, Dimitri Maziuk wrote: > > >> >Didn't you read Sven's rely? It says "DNS problem" right there. >

Re: ssh_exchange_identification: Connection closed by remote host PART II

2002-03-25 Thread Gary Turner
On Sun, 24 Mar 2002 18:29:39 -0600, Dimitri Maziuk wrote: >* Gary Turner ([EMAIL PROTECTED]) spake thusly: >> On Sun, 24 Mar 2002 13:12:56 -0600, Dimitri Maziuk wrote: >> >Didn't you read Sven's rely? It says "DNS problem" right there. >Make that "reply". Hmph; I see so many typos on the lists,

Re: ssh_exchange_identification: Connection closed by remote host PART II

2002-03-24 Thread Dimitri Maziuk
* Gary Turner ([EMAIL PROTECTED]) spake thusly: > On Sun, 24 Mar 2002 13:12:56 -0600, Dimitri Maziuk wrote: > > >* Gary Turner ([EMAIL PROTECTED]) spake thusly: > >> On Sun, 24 Mar 2002 08:46:00 +0100, Sven Hoexter wrote: > >> > >> >On Sat, Mar 23, 2002 at 01:09:37PM -0800, Jaye Inabnit ke6sls wr

Re: ssh_exchange_identification: Connection closed by remote host PART II

2002-03-24 Thread Gary Turner
On Sun, 24 Mar 2002 13:12:56 -0600, Dimitri Maziuk wrote: >* Gary Turner ([EMAIL PROTECTED]) spake thusly: >> On Sun, 24 Mar 2002 08:46:00 +0100, Sven Hoexter wrote: >> >> >On Sat, Mar 23, 2002 at 01:09:37PM -0800, Jaye Inabnit ke6sls wrote: >> > >Didn't you read Sven's rely? It says "DNS probl

Re: ssh_exchange_identification: Connection closed by remote host PART II

2002-03-24 Thread Dimitri Maziuk
* Gary Turner ([EMAIL PROTECTED]) spake thusly: > On Sun, 24 Mar 2002 08:46:00 +0100, Sven Hoexter wrote: > > >On Sat, Mar 23, 2002 at 01:09:37PM -0800, Jaye Inabnit ke6sls wrote: > > >> My question now is this: do I need to make these hosts_allow entries into > >> each of my linux computers?

Re: ssh_exchange_identification: Connection closed by remote host PART II

2002-03-24 Thread Michel Loos
Em Sáb, 2002-03-23 às 18:09, Jaye Inabnit ke6sls escreveu: > > Greetings again: > > I have sshd working again after adding an entry in my firewall/router's > /etc/hosts.allow file, but I am rather concerned that sshd included > tcp_wrappers without alerting users that are upgrading software

Re: ssh_exchange_identification: Connection closed by remote host PART II

2002-03-24 Thread Gary Turner
On Sun, 24 Mar 2002 08:46:00 +0100, Sven Hoexter wrote: >On Sat, Mar 23, 2002 at 01:09:37PM -0800, Jaye Inabnit ke6sls wrote: >> My question now is this: do I need to make these hosts_allow entries into >> each of my linux computers? I still find it very odd that all the other >> computers we

Re: ssh_exchange_identification: Connection closed by remote host PART II

2002-03-24 Thread Sven Hoexter
On Sat, Mar 23, 2002 at 01:09:37PM -0800, Jaye Inabnit ke6sls wrote: > > Greetings again: > > I have sshd working again after adding an entry in my firewall/router's > /etc/hosts.allow file, but I am rather concerned that sshd included > tcp_wrappers without alerting users that are upgradin

ssh_exchange_identification: Connection closed by remote host PART II

2002-03-23 Thread Jaye Inabnit ke6sls
Greetings again: I have sshd working again after adding an entry in my firewall/router's /etc/hosts.allow file, but I am rather concerned that sshd included tcp_wrappers without alerting users that are upgrading software via apt or dselect! Unless I missed something, I always read all th

ssh_exchange_identification: Connection closed by remote host

2002-03-23 Thread Jaye Inabnit ke6sls
Greetings: I am unable to connect to my cable firewall/router from my desktop box suddenly. I have gone so far as to wipe out my known_hosts file from my .ssh directory, but this still gives me the same error. What is unusual is that I can ssh to any of the other computers on my lan, *th

Re: Connection closed

1998-08-18 Thread Jieyao
which is as usual > > then followed by: > > Connection closed by foreign host. > > Assume for the moment that it is not an ISP problem, is there anything > specific to my machine that is causing this? > > I'd love some hints. Jieyao <[EMAIL PROTECTED]>

Re: Connection closed

1998-08-16 Thread Taren
> > When I connect to certain hosts via telnet (similar via ftp), I'll get a > messgae like this: > > Connected to site.whatever.edu > Escape character is '^]'. > > which is as usual > > then followed by: > > Connection closed by foreign hos

Re: Connection closed

1998-08-16 Thread Joey Hess
Richard Sevenich wrote: > Connected to site.whatever.edu > Escape character is '^]'. > > which is as usual > > then followed by: > > Connection closed by foreign host. > > Assume for the moment that it is not an ISP problem, is there anything >

Connection closed

1998-08-16 Thread Richard Sevenich
When I connect to certain hosts via telnet (similar via ftp), I'll get a messgae like this: Connected to site.whatever.edu Escape character is '^]'. which is as usual then followed by: Connection closed by foreign host. Assume for the moment that it is not an ISP problem, is

Re: Connection closed by foreign host.

1997-03-24 Thread Jason Killen
Ah, good call. I'll try it. Thanks On Sun, 23 Mar 1997, Mike Orr wrote: >Perhaps telnet is working properly but something else is causing your >login shell to exit immediately. > >I get a similar response, not with telnet, but with script. I would get >"Script started, output file is types

Re: Connection closed by foreign host.

1997-03-24 Thread Mike Orr
Perhaps telnet is working properly but something else is causing your login shell to exit immediately. I get a similar response, not with telnet, but with script. I would get "Script started, output file is typescript" and then it would immediately exit with "Script done, output file is typescri

Re: Connection closed by foreign host.

1997-03-21 Thread Jason Killen
Simple enough, so easy I should have thought of it myself (TM). daemon.log says Mar 21 00:20:59 rn120006 in.tel[9586]: connect from 127.0.0.1 Ekk. Now I'm really confused, I reinstalled getty and login. Anymore ideas? On Thu, 20 Mar 1997, Paul Christenson [N3EOP] wrote: >On Thu, 20 Mar 1997

Re: Connection closed by foreign host.

1997-03-21 Thread Paul Christenson \[N3EOP\]
On Thu, 20 Mar 1997, Jason Killen wrote: > Which log is "the log"? I'm looked throught last and auth.log but found > nothing. OK; do this: 1. Attempt a telnet session. 2. When it fails, cd to /var/log. 3. ls -ltr The error (if logged) will be in one of the last files listed. (My guess is da

Re: Connection closed by foreign host.

1997-03-20 Thread Maarten Boekhold
> > Trying 127.0.0.1... > > Connected to localhost. > > Escape character is '^]'. > > Connection closed by foreign host. > > Is there a delay between the 'Escape' and 'Connection closed' lines? If > so, it may be trying to resolve

Re: Connection closed by foreign host.

1997-03-20 Thread Jason Killen
There is a delay between the Escape character is '^]' and Connection closed. Which log is "the log"? I'm looked throught last and auth.log but found nothing. On Wed, 19 Mar 1997, Paul Christenson [N3EOP] wrote: >On Wed, 19 Mar 1997, Jason Killen wrote: > >&

Re: Connection closed by foreign host.

1997-03-20 Thread Paul Christenson \[N3EOP\]
On Wed, 19 Mar 1997, Jason Killen wrote: > I cant rlogin either but I do get mail along with other > services. What happens exactally is I try to telnet in and I get > > Trying 127.0.0.1... > Connected to localhost. > Escape character is '^]'. > Connection clos

Connection closed by foreign host.

1997-03-19 Thread Jason Killen
rlogin either but I do get mail along with other services. What happens exactally is I try to telnet in and I get Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. Connection closed by foreign host. I have tried telneting in from off machine but that dosent make any

Connection closed by host

1997-03-05 Thread Jason Killen
I just updated everything I have but now when I try to telnet into my machine I get a connection closed by host. I checked inetd.conf and found in.telnetd, other than that I'm not sure what could be wrong. Other things work eg sendmail. Any ideas?? Jason K