sshd BREAKIN ?

Tang Ho Yim hoyimtang at yahoo.com
Fri Mar 31 04:14:50 UTC 2006


core-01.148.rdcw.com is not my machine.......how come ?

Wee-Sern Soo <W.Soo at bom.gov.au> wrote:  Checked that your machine core-01.148.rdcw.com has a PTR record in DNS. 
It is used to determine name of machine from the IP address.

Regards,
Wee-Sern


Tang Ho Yim wrote the following on 31/03/2006 2:48 PM:
> I got a error messages from /var/log/auth.log which is about sshd......
> 
> .....sshd : reverse mapping checking getaddrinfo for core-01.148.rdcw.com failed - POSSIBLE BREAKIN ATTEMPT !
> 
> all my sshd_config is default setting except I have change to "PasswordAuthentication NO , PermitEmptyPasswords NO , and ChallengeResponseAuthentication NO"
> 
> Is that I am being hack ?
> last command show who is login before but it seem ok....
> What should I do ?
> 
> Thanks !
>
> 
> ---------------------------------
> Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low rates.
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
>
>
>
> 
_______________________________________________
freebsd-questions at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"


			
---------------------------------
Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low rates.


More information about the freebsd-questions mailing list