Re: sequences in the auth.log

From: Nikolay Pavlov (quetzal_at_roks.biz)
Date: 08/18/04

  • Next message: Devon H. O'Dell: "Re: sequences in the auth.log" 
    Date: Wed, 18 Aug 2004 12:54:21 +0300
To: Justin <freebsd@alt-network.com>

    Hi, Justin

    On Tuesday, 17 August 2004 at 23:01:28 -0500, Justin wrote:
    > I'm seeing the same thing in my log. It makes me think it is a virus because
    > test, guest, and admin are not normal unix users.

    And I'm too. But I think that this is a some kind of Linux worm.
    The first record in my auth.log dated on Jul 23 01:48:30
    Nmap identificates all hosts (already more than ten) in my auth.log as
    "Linux 2.4.0 - 2.5.20, Linux 2.4.20 (Itanium), Linux 2.4.20 - 2.4.22 w/grsecurity.org patch"

    Best regards,
            Nikolay Pavlov.
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Devon H. O'Dell: "Re: sequences in the auth.log"

    Relevant Pages

    • Re: sequences in the auth.log
      ... It makes me think it is a virus because ... test, guest, and admin are not normal unix users. ...
      (FreeBSD-Security)
    • Re: Samba - trouble with simple smb.conf
      ... dsl is admin ... and there is a guest account and a sambapassword for each: ... on the linux box for each of the Samba users? ... Error connecting to 192.168.0.8 (Connection refused) ...
      (Debian-User)
    • Re: Mac OS X virus (or trojan) in the wild
      ... "Mac Rumors reports on what may be the first virus to affect OS X ... The virus is said to also spread via Bon Jour instant messaging." ... As for requiring admin access, isn't that the default account mode on ...
      (comp.sys.mac.advocacy)
    • Re: Office 2003 Setup
      ... | User1 (Admin) to have access to Outlook and Word ... | Guest to have access to Outlook ... | as Guest or a user who doesn't have Admin rights. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Lost opening log on screen
      ... in XP Home you can login as built-in Administrator only in Safe Mode. ... now that my Admin and Guest icons are back at each startup ...
      (microsoft.public.windowsxp.basics)