sshd BREAKIN ?
Wee-Sern Soo
W.Soo at bom.gov.au
Fri Mar 31 03:58:31 UTC 2006
Checked that your machine core-01.148.rdcw.com has a PTR record in DNS.
It is used to determine name of machine from the IP address.
Regards,
Wee-Sern
Tang Ho Yim wrote the following on 31/03/2006 2:48 PM:
> I got a error messages from /var/log/auth.log which is about sshd......
>
> .....sshd : reverse mapping checking getaddrinfo for core-01.148.rdcw.com failed - POSSIBLE BREAKIN ATTEMPT !
>
> all my sshd_config is default setting except I have change to "PasswordAuthentication NO , PermitEmptyPasswords NO , and ChallengeResponseAuthentication NO"
>
> Is that I am being hack ?
> last command show who is login before but it seem ok....
> What should I do ?
>
> Thanks !
>
>
> ---------------------------------
> Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low rates.
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
>
>
>
>
More information about the freebsd-questions
mailing list