View Single Post
  #4   (View Single Post)  
Old 21st May 2009
Mantazz Mantazz is offline
Shell Scout
 
Join Date: Oct 2008
Posts: 90
Default

Quote:
Originally Posted by anomie View Post
AFAIK, this is not possible. Layer 3/4 communication knows nothing about a hostname, and the only reason the sshd daemon (eventually) knows the client hostname is because it does a reverse lookup.
Just to make sure that I am understanding your reply correctly - I am trying to figure out if these bots are accessing my system by its name or by its IP address. I already have the IP address of the system trying to get in, sshd grabs that automatically as we all know.

I rather suspected that this information wasn't retained or passed anywhere, that sshd knows only where the system on the other end is coming from and not how it issued the ssh command. And of course I rather doubt I could talk the bot-masters into installing a new ssh client on their zombies so that I could have that information
Reply With Quote