Re: failure login from of a unknow user

["Gabriel Orozco" <gabriel_orozco () mx sumida com>]

yeap.

is appears that he/she tried to access in screen2, and used the username
LOGIN with no password

----- Original Message -----
From: "b0fh" <b0fh () kkinterface co jp>
To: <security-basics () securityfocus com>
Sent: Tuesday, August 26, 2003 9:45 AM
Subject: failure login from of a unknow user


> Hello all,
>
> I found this on my /var/log/message
>
> ------------------
> Aug 25 17:18:15 servername login(pam_unix)[1072]: authentication
> failure; logname=LOGIN
> uid=0 euid=0 tty=tty2 ruser= rhost=
> Aug 25 17:18:17 servername login[1072]: FAILED LOGIN 1 FROM (null) FOR
> pwd, Authentication failure
> -----------------
>
> I don't have any ideas what was going on. Is that some one tried to
> login physically and entered nothing when username and passwd are asked?
>
> Thank you
>
>
>
> --------------------------------------------------------------------------
-
> Attend Black Hat Briefings & Training Federal, September 29-30 (Training),
> October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
> technical IT security event.  Modeled after the famous Black Hat event in
> Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
> Symantec is the Diamond sponsor.  Early-bird registration ends September
6.Visit us: www.blackhat.com
> --------------------------------------------------------------------------
--
>


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------