Server Management - Systems Insight Manager
cancel
Showing results for 
Search instead for 
Did you mean: 

[SIM 6.1] SSHD events on Application eventlog

Danilo B
Frequent Advisor

[SIM 6.1] SSHD events on Application eventlog

Hi all,

every one hour I see these sshd events on Application eventlog of the SIM server:

1. PID 5780: Invalid user root from [SIM server IP address].
2. PID 5780: input_userauth_request: invalid user root.
3. PID 5780: Failed none for invalid user root from [SIM server IP address] port 1766 ssh2.
4. PID 5780: Received disconnect from [SIM server IP address]: 11: The user disconnected the application.

SIM version is 6.1 running on Windows Server 2003 Standard with SQL Server 2008.

What about this root user? This is a Windows Server!!

Thank you all for help!