Re: redhat-list Digest, Vol 39, Issue 21

From: Stephen Carville <stephen@xxxxxxxxxxxxxx>
Date: Fri, 18 May 2007 10:46:14 -0700

Dineshwar Kumar wrote:

Hi All,

i get this entry in my log. do any one have idea what is the reson of it.

With thanks,

Dinesh

May 15 10:08:57 pub01 sshd[14316]: Accepted publickey for abcuser from
XX.XX.XX.XX port 35375 ssh2

May 15 10:08:58 pub01 sshd[14316]: reverse mapping checking getaddrinfo
for
host-XX.XX.XX.XX.edu failed - POSSIBLE BREAKIN ATTEMPT!

May 15 10:10:02 pub01 sshd[14430]: Accepted publickey for abcuser from
XX.XX.XX.XX. port 35530 ssh2

May 15 10:10:02 pub01 sshd[14430]: reverse mapping checking getaddrinfo
for
host-XX.XX.XX.XX.edu failed - POSSIBLE BREAKIN ATTEMPT!

This is probably DNS related but if you hide the IP addresses I'm not gong to waste my time guessing about it.

--
Stephen Carville <stephen@xxxxxxxxxxxxxx>
Systems Engineer
Land America
1.626.667.1450 X326

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

References:
- Re: redhat-list Digest, Vol 39, Issue 21
  - From: Dineshwar Kumar

Prev by Date: Re: redhat-list Digest, Vol 39, Issue 21
Next by Date: Re: RHEL Security Kernel Tuning
Previous by thread: Re: redhat-list Digest, Vol 39, Issue 21
Next by thread: Re: redhat-list Digest, Vol 39, Issue 21
Index(es):
- Date
- Thread

Relevant Pages

Re: redhat-list Digest, Vol 39, Issue 21
... from XX.XX.XX.XX port 35375 ssh2 ... getaddrinfo for host-XX.XX.XX.XX.edu
failed - POSSIBLE BREAKIN ... (RedHat)
Re: redhat-list Digest, Vol 39, Issue 21
... do any one have idea what is the reson of it. ... XX.XX.XX.XX port 35375
ssh2 ... host-XX.XX.XX.XX.edu failed - POSSIBLE BREAKIN ATTEMPT! ... (RedHat)
Attempt to breakin
... port 42989 ssh2 ... Jul 6 21:37:53 findmoore sshd: Failed password
for root from ... (comp.os.linux.networking)
Re: SSH newbie interested in security concerns
... block the ssh kidy scripts ... The script is pretty mush already done
and seems to work. ... patrick from 202.164.35.46 port 41269 ssh2 ... (comp.os.linux.security)
Re: SSH newbie interested in security concerns
... is it possible to only allow the root login ... patrick from 202.164.35.46
port 41269 ssh2 ... (comp.os.linux.security)