From owner-freebsd-questions@FreeBSD.ORG  Tue Nov 16 20:14:58 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 40CD816A4D1
	for <freebsd-questions@freebsd.org>;
	Tue, 16 Nov 2004 20:14:58 +0000 (GMT)
Received: from sccrmhc12.comcast.net (sccrmhc12.comcast.net [204.127.202.56])
	by mx1.FreeBSD.org (Postfix) with ESMTP id EBE7643D31
	for <freebsd-questions@freebsd.org>;
	Tue, 16 Nov 2004 20:14:57 +0000 (GMT)
	(envelope-from fbsd-questions@trini0.org)
Received: from hivemind.trini0.org (trini0.org[65.34.205.195])
          by comcast.net (sccrmhc12) with ESMTP
          id <20041116201456012008ts5le>; Tue, 16 Nov 2004 20:14:56 +0000
Received: from [192.168.0.16] (gladiator.trini0.org [192.168.0.16])
	by hivemind.trini0.org (Postfix) with ESMTP id 6F4E06137
	for <freebsd-questions@freebsd.org>;
	Tue, 16 Nov 2004 15:14:56 -0500 (EST)
Message-ID: <419A5FC0.9070307@trini0.org>
Date: Tue, 16 Nov 2004 15:14:56 -0500
From: Gerard Samuel <fbsd-questions@trini0.org>
User-Agent: Mozilla Thunderbird 0.9 (X11/20041114)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: freebsd-questions <freebsd-questions@freebsd.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Do I need to worry about these logs?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Nov 2004 20:14:58 -0000

This is a fresh install of 5.3 from last week.
Granted the script-kiddies has been working to break in via ssh,
when I was running 4.10, I've never seen these types of logs before.
Any clues, would be appreciated.
Thanks.

-- snip of /var/logs/auth.log --
Nov 16 09:06:56 hivemind sshd[7611]: reverse mapping checking 
getaddrinfo for 203-150-17-44.inter.net.th failed - POSSIBLE BREAKIN 
ATTEMPT!