Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
24.7 Production Series
»
Authentication Failures in Audit Log
« previous
next »
Print
Pages: [
1
]
Author
Topic: Authentication Failures in Audit Log (Read 330 times)
guest47174
Guest
Authentication Failures in Audit Log
«
on:
August 07, 2024, 12:06:07 am »
Seeing the following message in System - Log Files - Audit
"user \x1b[A\x1b[A could not authenticate for login. [using OPNsense\Auth\Services\System + OPNsense\Auth\Local]"
Not sure if this could be a bug or if I should be concerned about a compromise attempt.
Can anyone add any context to this ? the username looks like an ANSI escape sequence
https://gist.github.com/ConnerWill/d4b6c776b509add763e17f9f113fd25b
Logged
joezeppy
Newbie
Posts: 6
Karma: 0
Re: Authentication Failures in Audit Log
«
Reply #1 on:
August 07, 2024, 01:26:44 pm »
This is easily reproduceable by hitting the up-arrow key twice at the console login prompt. Then press enter twice.
The username will be shown in the audit log like you've stated.
Logged
Deciso DEC850v2
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
24.7 Production Series
»
Authentication Failures in Audit Log