This is a discussion on sshd attacks: a little question about weird username within the Linux Security forums, part of the System Security and Security Related category; This is regarding the same old sshd attackes we see so commonly now a days. My log is full of ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
This is regarding the same old sshd attackes we see so commonly now a
days. My log is full of them and I get one or two every couple of days or so. Today however, I noticed these lines: Jul 28 08:54:48 localhost sshd[12559]: Did not receive identification string from ::ffff:61.111.254.130 Jul 28 09:06:51 localhost sshd[12561]: Illegal user \357\273\277root from ::ffff:61.111.254.130 What does that "\357\273\277root" in the second line mean? I don't recall noticing this earlier. thanks, ->HS -- Please remove the underscores ( the '_' symbols) from my email address to obtain the correct one. Apologies, but the fudging is to remove spam. |
|
|||
|
> What does that "\357\273\277root" in the second line mean? I don't
> recall noticing this earlier. the characters before root because of a character conversion. either illegal or unknown characters -- lg niko icq:# 129022192 -- Aus Lügen, die wir glauben, werden Wahrheiten, mit denen wir leben (Oliver Hassencamp) |