Re: strange auth log
These messages would seem to suggest someone was pounding on your terminal keyboard trying to log in. The blank bad user names I would assume means no user name was entered.
The p[d[d[c[c`...,,mmnnbbb and ^IZCXCGH^[[19~ would lead me to believe there was a furry animal running around your keyboard. Do you have a cat? <smile>
If you know no one had physical access to your computer at the time of these log messages then I would not rule out other issues. I could speculate as to what these issues could be but I think the scenario I provided is among the most probable.
Phil
-----Original Message-----
From: Répási Tibor <repasi.tibor@chello.hu>
To: "Debian-Security Mailing list" <debian-security@lists.debian.org>
Date: Mon, 7 Jan 2002 08:27:53 +0100
Subject: strange auth log
Hi there,
I've some strange lines in my auth.log :
Jan 5 19:45:57 panda PAM_unix[500]: bad username [ ]
Jan 5 19:46:00 panda login[500]: FAILED LOGIN (1) on `tty1' FOR `UNKNOWN',
User not known to the underlying authentication module
Jan 5 19:46:05 panda PAM_unix[500]: bad username [ ]
Jan 5 19:46:07 panda login[500]: FAILED LOGIN (2) on `tty1' FOR `UNKNOWN',
User not known to the underlying authentication module
Jan 5 19:46:12 panda PAM_unix[500]: bad username [ ]
Jan 5 19:46:14 panda login[500]: FAILED LOGIN (3) on `tty1' FOR `UNKNOWN',
User not known to the underlying authentication module
Jan 5 19:46:32 panda PAM_unix[500]: bad username [^IZCXCGH^[[19~ ]
Jan 5 19:46:35 panda login[500]: FAILED LOGIN (4) on `tty1' FOR `UNKNOWN',
User not known to the underlying authentication module
Jan 5 19:48:22 panda PAM_unix[2729]: bad username [[p[d[d[c[c
`...,,mmnnbbb ]
Anybody an idea what this is? I'm running potato with kernel 2.2.20, and
these are the last lines in the log before my linux box crashed, after 19:48
any connection to the host was timeed out.
Greetings,
Tibor
--
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: