SSH: Invalid Header

This protocol anomaly is an invalid SSH header. SSH headers always start with "SSH." This could indicate someone trying to tunnel through the SSH port.

Extended Description

If an SSH message does not start with the string "SSH", this could indicate an SSH configuration or implementation error. It also could indicate that an attempt to transfer tunneling traffic over an SSH port, or an attack against an SSH server or client is underway.

Short Name
SSH:ERROR:INVALID-HEADER
Severity
Minor
Recommended
False
Recommended Action
None
Category
SSH
Release Date
04/22/2003
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
False Positive
Unknown

Found a potential security threat?