From owner-freebsd-questions@FreeBSD.ORG  Tue Jun 13 10:16:53 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B63D516A41A
	for <freebsd-questions@freebsd.org>;
	Tue, 13 Jun 2006 10:16:53 +0000 (UTC) (envelope-from gtsy@mail.ru)
Received: from mx1.mail.ru (mx1.mail.ru [194.67.23.121])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4D92D43D45
	for <freebsd-questions@freebsd.org>;
	Tue, 13 Jun 2006 10:16:53 +0000 (GMT) (envelope-from gtsy@mail.ru)
Received: from [87.240.6.158] (port=55575 helo=savs) by mx1.mail.ru with esmtp 
	id 1Fq5x4-000AZR-00
	for freebsd-questions@freebsd.org; Tue, 13 Jun 2006 14:16:51 +0400
From: "Stroganov A. V." <gtsy@mail.ru>
To: freebsd-questions@freebsd.org
In-Reply-To: <448E6481.2020002@messias.qhigh.com>
References: <448E6481.2020002@messias.qhigh.com>
Date: Tue, 13 Jun 2006 11:43:14 +0400
Message-Id: <1150184594.12293.2.camel@savs.home>
Mime-Version: 1.0
X-Mailer: Evolution 2.6.2 FreeBSD GNOME Team Port 
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: Re: Breakin attempt in the log
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: gtsy@mail.ru
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Jun 2006 10:16:53 -0000

Greetings

I had such logs. Solved it (and some brootforces) by moving sshd from
port 22 to 5422 or something else.

Good luck.
>  Hello,
> 
> I have thousands of similar lines in my security log each day:
> 
> 
> Jun  9 06:34:12 designaproduct sshd[58759]: reverse mapping checking getaddrinfo for ev1s-67-15-10-78.ev1servers.net failed - POSSIBLE BREAKIN ATTEMPT!
> 
> Is this something I need to fear of?
> 
> Thanks,
> 
>    Laszlo