From owner-freebsd-security@FreeBSD.ORG  Mon Mar 22 23:40:25 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B8AF416A4CE
	for <freebsd-security@freebsd.org>;
	Mon, 22 Mar 2004 23:40:25 -0800 (PST)
Received: from hamlet.pilgerer.de (hamlet.pilgerer.de [213.133.123.43])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 05B0643D2F
	for <freebsd-security@freebsd.org>;
	Mon, 22 Mar 2004 23:40:25 -0800 (PST)
	(envelope-from benny@pilgerer.de)
Received: from hamlet.pilgerer.de (hamlet.pilgerer.de [213.133.123.43])
	by hamlet.pilgerer.de (8.12.10/8.12.10) with ESMTP id i2N7dVCe020506
	for <freebsd-security@freebsd.org>;
	Tue, 23 Mar 2004 08:40:21 +0100 (CET)
Received: (from benny@localhost)
	by hamlet.pilgerer.de (8.12.10/8.12.7/Submit) id i2MKmEB3003627
	for freebsd-security@freebsd.org;
	Mon, 22 Mar 2004 21:48:14 +0100 (CET)
Date: Mon, 22 Mar 2004 21:48:14 +0100
From: Benjamin von Mossner <benny@vonmossner.de>
To: freebsd-security@freebsd.org
Message-ID: <20040322204814.GA3540@vonmossner.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Operating-System: FreeBSD 4.9-STABLE i386
User-Agent: Mutt/1.5.6i
X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.24.0.7; VDF 6.24.0.66
Subject: auth.log messages
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 23 Mar 2004 07:40:25 -0000

hi list,

i've seen those messages in my auth.log and really dont know
where to classify them. The messages are inside a jail, base
system is clear of those..

[snip]
Mar 19 13:44:37 hamlet login: 2 LOGIN FAILURES ON ttypb
Mar 19 13:44:37 hamlet login: 2 LOGIN FAILURES ON ttypb, 78419s4
Mar 19 13:44:51 hamlet login: 2 LOGIN FAILURES ON ttypb
Mar 19 13:44:51 hamlet login: 2 LOGIN FAILURES ON ttypb, exit
[snap]

opinions are appreciated.

greets
benny
-- 
/"\ ASCII RIBBON CAMPAIGN                  | Benjamin von Mossner
\ / AGAINST HTML MAIL                      | benny@vonmossner.de
 X  
/ \ multiple exclamation marks are a sure sign of a diseased mind