Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 Jul 2018 20:07:15 +0000
From:      Grzegorz Junka <list1@gjunka.com>
To:        freebsd-security@freebsd.org
Subject:   Possible break-in attempt?
Message-ID:  <594ba84b-0691-8471-4bd4-076d0ae3da98@gjunka.com>

next in thread | raw e-mail | index | archive | help
Sometimes I am receiving messages like this from my server:

nas.myserver.mydomain.com login failures:
Jul 17 08:35:02 nas sshd[5994]: reverse mapping checking getaddrinfo for 
162.132-254-62.static.virginmediabusiness.co.uk [62.254.132.162] failed 
- POSSIBLE BREAK-IN ATTEMPT!

On different days they are from different IPs and they would-be mapped 
to different reverse dns names. How to deal with those messages/attempts?

GrzegorzJ




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?594ba84b-0691-8471-4bd4-076d0ae3da98>