RE: it this is ssh issue ?

Got beat to it ;)

-----Original Message-----
From: redhat-list-bounces@xxxxxxxxxx
[mailto:redhat-list-bounces@xxxxxxxxxx] On Behalf Of Gareth Llewellyn
Sent: 22 May 2007 10:29
To: Redhat-Help
Subject: RE: it this is ssh issue ?

Well the PTR record for 66.181.224.56 reports host-66-181-224-56.jwu.edu
however there are no corresponding A Records for that.

Its getting paranoid because it 'thinks' that someone *might* be
spoofing one side of the DNS (I,e presenting a fake hostname etc)

-----Original Message-----
From: redhat-list-bounces@xxxxxxxxxx
[mailto:redhat-list-bounces@xxxxxxxxxx] On Behalf Of Dineshwar Kumar
Sent: 22 May 2007 10:22
To: Redhat-Help
Subject: it this is ssh issue ?

Hi all,


i got this entry on my server log, do anyone have idea about it. is this
is
ssh issue or DNS related problem? i try a lot in our lab but unable to
get
this error agian. I my sshd_config file UseDNS option is enable, but it
won't any help



May 15 10:08:57 pub01 sshd[14316]: Accepted publickey for jwuser from
66.181.224.56 port 35375 ssh2

May 15 10:08:58 pub01 sshd[14316]: reverse mapping checking getaddrinfo
for
host-66-181-224-56.jwu.edu failed - POSSIBLE BREAKIN ATTEMPT!

May 15 10:10:02 pub01 sshd[14430]: Accepted publickey for jwuser from
66.181.224.56 port 35530 ssh2

May 15 10:10:02 pub01 sshd[14430]: reverse mapping checking getaddrinfo
for
host-66-181-224-56.jwu.edu failed - POSSIBLE BREAKIN ATTEMPT!





With Thanks,
--
Dineshwar Kumar
New Delhi
9891188600
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Relevant Pages

  • Re: ssh gives "Permission denied, please try again"
    ... port 22 on your internal machine, so you will need to keep ssh up to ... I configure the router to forward a different external port to 22 on my ... For good measure pick usernames that are none obvious, ... root/password: 163 times ...
    (uk.comp.os.linux)
  • Re: Odd ssh attacks?
    ... port 57194 ssh2 ... The first thing to do is to set ssh so users have to use a key rather ... IT Services Division, Kilburn Building, Oxford Road, Manchester M13 9PL. ...
    (Ubuntu)
  • [NEWS] SSH service at Dell DRAC4 Denial of Service (Mocana)
    ... SSH service at Dell DRAC4 Denial of Service ... Dell Remote Access Card 4 allows customers to effectively manage ... After the use of such a port scanner, ...
    (Securiteam)
  • SSH protocol2 without a password
    ... Have read 'ssh without a password' and apparently the problem lingers. ... # similar for protocol version 2 ... server listening on 0.0.0.0 Port 22 ... failed publickey for root from 192.168.0.1 port 32769 ssh2 ...
    (comp.security.ssh)
  • Re: sshd question
    ... Three days ago my Linux box stopped ... piotrs from 201.63.24.60 port 46229 ssh2 ... Couple of things on securing ssh. ...
    (comp.os.linux.networking)