sshd attacks: a little question about weird username

This is a discussion on sshd attacks: a little question about weird username within the Linux Security forums, part of the System Security and Security Related category; This is regarding the same old sshd attackes we see so commonly now a days. My log is full of ...


Go Back   Usenet Forums > System Security and Security Related > Linux Security

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 07-28-2005
H. S.
 
Posts: n/a
Default sshd attacks: a little question about weird username

This is regarding the same old sshd attackes we see so commonly now a
days. My log is full of them and I get one or two every couple of days
or so.

Today however, I noticed these lines:
Jul 28 08:54:48 localhost sshd[12559]: Did not receive identification
string from ::ffff:61.111.254.130
Jul 28 09:06:51 localhost sshd[12561]: Illegal user \357\273\277root
from ::ffff:61.111.254.130

What does that "\357\273\277root" in the second line mean? I don't
recall noticing this earlier.

thanks,
->HS

--
Please remove the underscores ( the '_' symbols) from my email address
to obtain the correct one. Apologies, but the fudging is to remove spam.
Reply With Quote
  #2 (permalink)  
Old 07-28-2005
Nikolai Försterling
 
Posts: n/a
Default Re: sshd attacks: a little question about weird username

> What does that "\357\273\277root" in the second line mean? I don't
> recall noticing this earlier.

the characters before root because of a character conversion.
either illegal or unknown characters
--
lg niko
icq:# 129022192
--
Aus Lügen, die wir glauben,
werden Wahrheiten, mit denen wir leben
(Oliver Hassencamp)

Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 07:37 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0