From owner-freebsd-questions@FreeBSD.ORG Fri Jan 12 21:43:10 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id AF83816A415 for ; Fri, 12 Jan 2007 21:43:10 +0000 (UTC) (envelope-from maanjee@gmail.com) Received: from an-out-0708.google.com (an-out-0708.google.com [209.85.132.240]) by mx1.freebsd.org (Postfix) with ESMTP id 535BF13C459 for ; Fri, 12 Jan 2007 21:43:10 +0000 (UTC) (envelope-from maanjee@gmail.com) Received: by an-out-0708.google.com with SMTP id c24so603134ana for ; Fri, 12 Jan 2007 13:43:09 -0800 (PST) DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type; b=LESpDOpDi07HB8vZzzesMO5T3wR+eMnEtslk46z0Voj+Nr/GdyBVlHjWZOi3SPsYkZKR2g/WG/ZBoUTY+D6l/Xytem4TtaaEmJHV2ax8mFir6UGdIyZcIQSykCVWApgvqwAu6sIY83Vbxfzv1fFB6ItjVG3TvJbrFqL1Ar0xdFM= Received: by 10.100.163.12 with SMTP id l12mr637077ane.1168638189001; Fri, 12 Jan 2007 13:43:09 -0800 (PST) Received: by 10.100.33.13 with HTTP; Fri, 12 Jan 2007 13:43:08 -0800 (PST) Message-ID: <2cd0a0da0701121343g7fa2535fv4a7b201f5a03aff2@mail.gmail.com> Date: Fri, 12 Jan 2007 22:43:08 +0100 From: VeeJay To: maanjee@gmail.com, FreeBSD-Questions MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Subject: Please Help! How to STOP them... X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jan 2007 21:43:10 -0000 I am reading many hundred lines similar to below mentioned? Could you please advise me what to do and how can I make my box more secure? Jan 9 17:54:42 localhost sshd[5130]: reverse mapping checking getaddrinfo for bbs-83-179.189.218.on-nets.com [218.189.179.83] failed - POSSIBLE BREAK-IN ATTEMPT! Jan 9 17:54:42 localhost sshd[5130]: Invalid user sysadmin from 218.189.179.83 -- Thanks! BR / vj