These messages would seem to suggest someone was pounding on your terminal keyboard trying to log in. The blank bad user names I would assume means no user name was entered.
The p[d[d[c[c`...,,mmnnbbb and ^IZCXCGH^[[19~ would lead me to believe there was a furry animal running around your keyboard. Do you have a cat? <smile> If you know no one had physical access to your computer at the time of these log messages then I would not rule out other issues. I could speculate as to what these issues could be but I think the scenario I provided is among the most probable. Phil -----Original Message----- From: Répási Tibor <[EMAIL PROTECTED]> To: "Debian-Security Mailing list" <[email protected]> Date: Mon, 7 Jan 2002 08:27:53 +0100 Subject: strange auth log Hi there, I've some strange lines in my auth.log : Jan 5 19:45:57 panda PAM_unix[500]: bad username [ ] Jan 5 19:46:00 panda login[500]: FAILED LOGIN (1) on `tty1' FOR `UNKNOWN', User not known to the underlying authentication module Jan 5 19:46:05 panda PAM_unix[500]: bad username [ ] Jan 5 19:46:07 panda login[500]: FAILED LOGIN (2) on `tty1' FOR `UNKNOWN', User not known to the underlying authentication module Jan 5 19:46:12 panda PAM_unix[500]: bad username [ ] Jan 5 19:46:14 panda login[500]: FAILED LOGIN (3) on `tty1' FOR `UNKNOWN', User not known to the underlying authentication module Jan 5 19:46:32 panda PAM_unix[500]: bad username [^IZCXCGH^[[19~ ] Jan 5 19:46:35 panda login[500]: FAILED LOGIN (4) on `tty1' FOR `UNKNOWN', User not known to the underlying authentication module Jan 5 19:48:22 panda PAM_unix[2729]: bad username [[p[d[d[c[c `...,,mmnnbbb ] Anybody an idea what this is? I'm running potato with kernel 2.2.20, and these are the last lines in the log before my linux box crashed, after 19:48 any connection to the host was timeed out. Greetings, Tibor -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
