divne hlasky v logu

[David Rohleder]

Pavel Urban <pavel.urban na hq.iol.cz> writes:

> Zdravim,
> 
> nerikaji vam nekomu neco takovehle hlasky? Obcas se nam objevuji v logu
> a netusim, o co by se mohlo jednat... Prvni druh je tohle:
> 
> Nov 22 19:36:52 webquick login(pam_unix)[10253]: bad username
> [***************************************************]
> Nov 22 19:36:52 webquick login[10253]: FAILED LOGIN 1 FROM (null) FOR
> ***************************************************, Authentication
> failure
> Nov 22 19:36:53 webquick login(pam_unix)[10253]: bad username
> [^H^HI1%9Ua!Q^H^H^H^H^H^H^H^H1%9Ua!Q
> ^H^H^H^H^H^H^H^H11%9Ua!Q^H^H^H^H^H^H^H%9Ua!Q
> ^H^H^H^H^H^H^H^H1%9Ua!QM^H^H^H^H^H^H^H^H       
> ^H^H^H^H^H^H^H^H]9E^H^H^H!]9E^H^H^HM]9E^H^H^H^H^H]9E 
> ^H^H^H^H^H]9E]=1!M%5)-^H^H^H^H^H^H^H^H^H^H^H^H           
> ^H^H^H^H^H^H^H^H^H^H^H^HI9^H^H 
> ^H^H1^HI1^H91^HQ1^H91^He1^H51^HE1^HI1^H11^H51^H1A^H^H^H^H^H^H^H^H^H^H^H^H=I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H9I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H^H^H=9I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H^H^HI=9I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H^H^H5=9I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H^H^HA=9I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H^H^HI=9I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H^H^H==9I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H^H^H]
> Nov 22 19:36:53 webquick login[10253]: FAILED LOGIN 2 FROM (null) FOR
> ^H^HI1%9Ua!Q^H^H^H^H^H^H^H^H1%9Ua!Q
> ^H^H^H^H^H^H^H^H11%9Ua!Q^H^H^H^H^H^H^H%9Ua!Q
> ^H^H^H^H^H^H^H^H1%9Ua!QM^H^H^H^H^H^H^H^H       
> ^H^H^H^H^H^H^H^H]9E^H^H^H!]9E^H^H^HM]9E^H^H^H^H^H]9E 
> ^H^H^H^H^H]9E]=1!M%5)-^H^H^H^H^H^H^H^H^H^H^H^H           
> ^H^H^H^H^H^H^H^H^H^H^H^HI9^H^H 
> ^H^H1^HI1^H91^HQ1^H91^He1^H51^HE1^HI1^H11^H51^H1A^H^H^H^H^H^H^H^H^H^H^H^H=I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H9I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H^H^H=9I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H^H^HI=9I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H^H^H5=9I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H^H^HA=9I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H^H^HI=9I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H^H^H==9I9Q9e5EI151A^H^H^H^H^H^H^H^H^H^H^H^H^H^H,
> Authentication failure

Nekdo naklapal do klavesnice blbosti pri prihlasovani (misto username)
Nebo treba spatna klavesnice. Nic zajimaveho.

> 
> 
> ...a druhy tohle:
> Nov 22 19:27:34 webquick kernel: IN=eth2 OUT=
> MAC=00:d0:b7:8e:cd:31:00:00:0c:5b:2b:82:08:00 SRC=203.135.10.124
> DST=10.2.3.43 LEN=56 TOS=0x00 PREC=0x00 TTL=241 ID=571 DF PROTO=ICMP
> TYPE=4 CODE=0 [SRC=10.2.3.43 DST=203.135.11.133 LEN=64 TOS=0x00
> PREC=0x00 TTL=253 ID=47269 FRAG:64 PROTO=TCP ] 


> Nov 22 19:27:39 webquick kernel: IN=eth2 OUT=
> MAC=00:d0:b7:8e:cd:31:00:00:0c:5b:2b:82:08:00 SRC=203.135.10.124
> DST=10.2.3.43 LEN=56 TOS=0x00 PREC=0x00 TTL=241 ID=602 DF PROTO=ICMP
> TYPE=4 CODE=0 [SRC=10.2.3.43 DST=203.135.11.133 LEN=60 TOS=0x00
> PREC=0x00 TTL=253 ID=47290 FRAG:64 PROTO=TCP ] 

ICMP Source Quench Message viz RFC 792

-- 
-------------------------------------------------------------------------
David Rohleder						davro na ics.muni.cz
Institute of Computer Science, Masaryk University
Brno, Czech Republic
-------------------------------------------------------------------------