Re: weird login attempt

From: Kris Kennaway (kris@obsecurity.org)
Date: 02/23/01


Date: Fri, 23 Feb 2001 11:19:26 -0800
From: Kris Kennaway <kris@obsecurity.org>
To: "Peter C. Lai" <sirmoo@cowbert.2y.net>


On Fri, Feb 23, 2001 at 02:10:22PM -0500, Peter C. Lai wrote:
> if someone tried to telnet in, and at the password prompt, they just pressed
> some keys and of course in telnet, before the session termcap is

Except that the login was on the system console. Someone pressed some
arrow/function keys on the system keyboard and pressed enter.

> > > > > Feb 23 10:41:33 www login: 1 LOGIN FAILURE ON ttyv0,
> > > ^[[S^[[J^[[J^[[J^[[~^[
> > > > > Feb 23 10:41:33 www login: 1 LOGIN FAILURE ON ttyv0,
> > > ^[[S^[[J^[[J^[[J^[[~^[

Kris



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message