From owner-freebsd-security Fri Feb 23 3:50:45 2001 Delivered-To: freebsd-security@freebsd.org Received: from ringworld.nanolink.com (ringworld.nanolink.com [195.24.48.189]) by hub.freebsd.org (Postfix) with SMTP id D4D4D37B4EC for ; Fri, 23 Feb 2001 03:50:39 -0800 (PST) (envelope-from roam@orbitel.bg) Received: (qmail 8831 invoked by uid 1000); 23 Feb 2001 11:48:43 -0000 Date: Fri, 23 Feb 2001 13:48:43 +0200 From: Peter Pentchev To: Fernando Schapachnik Cc: slamdunk , freebsd-security@FreeBSD.ORG Subject: Re: weird login attempt Message-ID: <20010223134843.H1899@ringworld.oblivion.bg> Mail-Followup-To: Fernando Schapachnik , slamdunk , freebsd-security@FreeBSD.ORG References: <4.3.2.7.2.20010223113706.00cedb10@pop3.neophile.net> <200102231146.IAA94132@ns1.via-net-works.net.ar> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200102231146.IAA94132@ns1.via-net-works.net.ar>; from fpscha@ns1.via-net-works.net.ar on Fri, Feb 23, 2001 at 08:46:59AM -0300 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri, Feb 23, 2001 at 08:46:59AM -0300, Fernando Schapachnik wrote: > En un mensaje anterior, slamdunk escribio: > > Can anyone identify what this might be? > > Somebody laying its hand over the keyboard :) > > > > > Feb 23 10:41:33 www login: 1 LOGIN FAILURE ON ttyv0 > > Feb 23 10:41:33 www login: 1 LOGIN FAILURE ON ttyv0 > > Feb 23 10:41:33 www login: 1 LOGIN FAILURE ON ttyv0, ^[[S^[[J^[[J^[[J^[[~^[ > > Feb 23 10:41:33 www login: 1 LOGIN FAILURE ON ttyv0, ^[[S^[[J^[[J^[[J^[[~^[ Those are probably F-keys or similar.. ^[[S is F7, ^[[J is probably something around the numeric keypad. G'luck, Peter -- If you think this sentence is confusing, then change one pig. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message