From owner-freebsd-questions@FreeBSD.ORG Mon Mar 27 17:20:45 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A2EEF16A400 for ; Mon, 27 Mar 2006 17:20:45 +0000 (UTC) (envelope-from fbsd_user@a1poweruser.com) Received: from mta13.adelphia.net (mta13.adelphia.net [68.168.78.44]) by mx1.FreeBSD.org (Postfix) with ESMTP id 152EE43D46 for ; Mon, 27 Mar 2006 17:20:44 +0000 (GMT) (envelope-from fbsd_user@a1poweruser.com) Received: from barbish ([70.39.69.56]) by mta13.adelphia.net (InterMail vM.6.01.05.02 201-2131-123-102-20050715) with SMTP id <20060327172044.PGJN3381.mta13.adelphia.net@barbish>; Mon, 27 Mar 2006 12:20:44 -0500 From: "fbsd_user" To: "Imran Imtiaz" , Date: Mon, 27 Mar 2006 12:20:39 -0500 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478 Importance: Normal In-Reply-To: <200603270428.k2R4SX0Q008390@darkstar.thelakecity.com.pk> Cc: Subject: RE: what does this message means X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: fbsd_user@a1poweruser.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Mar 2006 17:20:45 -0000 It means a attacker who has camouflaged his real identity found your ssh port open and was trying to gain access, but ssh's security did its job and denied access just like it's designed to do. -----Original Message----- From: owner-freebsd-questions@freebsd.org [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of Imran Imtiaz Sent: Sunday, March 26, 2006 11:29 PM To: freebsd-questions@freebsd.org Subject: what does this message means I got the following in my daily security check logs. what does it mean? Mar 26 14:27:17 darkstar sshd[90821]: reverse mapping checking getaddrinfo for genesis-27-156-16-del.genesipr.com failed - POSSIBLE BREAKIN ATTEMPT! Mar 26 14:27:22 darkstar sshd[90823]: reverse mapping checking getaddrinfo for genesis-27-156-16-del.genesipr.com failed - POSSIBLE BREAKIN ATTEMPT! Mar 26 14:27:26 darkstar sshd[90825]: reverse mapping checking getaddrinfo for genesis-27-156-16-del.genesipr.com failed - POSSIBLE BREAKIN ATTEMPT! Mar 26 14:27:30 darkstar sshd[90827]: reverse mapping checking getaddrinfo for genesis-27-156-16-del.genesipr.com failed - POSSIBLE BREAKIN ATTEMPT! Mar 26 14:27:35 darkstar sshd[90836]: reverse mapping checking getaddrinfo for genesis-27-156-16-del.genesipr.com failed - POSSIBLE BREAKIN ATTEMPT! regards, Imran _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"