15 digit HEX string in /var/log/messages

Tom Nguyen imbg11 at gmail.com
Tue Feb 14 13:31:56 PST 2006


Greetings all,

Running FreeBSD 5.4 stable on intel x86 platform. Need help in
deciphering /figuring out what is the cause of strange 15 character HEX
strings that is logging in /var/log/messages:

[...]
Feb 14 13:11:39 hostx kernel: 3E0D0A3C6172656
Feb 14 13:14:12 hostx kernel: 4163636570742D4
Feb 14 13:14:19 hostx kernel: 69742532464C697
Feb 14 13:14:26 hostx kernel: 4163636570742D4
Feb 14 13:31:44 hostx kernel: 732E616861696E7
Feb 14 13:32:31 hostx kernel: 415577426F41475
Feb 14 13:32:31 hostx kernel: 415577426F41475
Feb 14 13:33:40 hostx kernel: 2A0D0A416363657
Feb 14 13:33:48 hostx kernel: 2E616861696E746
Feb 14 13:33:49 hostx kernel: 736573736D656E7
Feb 14 13:43:22 hostx kernel: 45414141412F2F2
Feb 14 14:00:38 hostx kernel: 780D0A416363657
Feb 14 14:02:45 hostx kernel: 0A200D0A09626F7
Feb 14 14:13:19 hostx kernel: 70616765732F686
Feb 14 14:39:10 hostx kernel: 64066FF3ED39E31
Feb 14 14:47:57 hostx kernel: 414141414141414
[...]

This has been occurring for several weeks now. First thought was some
type of attack but our IDS doesn't pick up anything unusual.
Google searches doesn't give any clues. Can anyone shed some light on this?

TIA. --T


More information about the freebsd-questions mailing list