Hi, You can ignore them totally (you should), and if you can't, make sure you limit possibility of brute force attack on your sshd: - configure a firewall to stop them - and/or activate blacklistd on sshd - and/or change listening port of sshd
I get thousands of these every day, won't kill you and not worth losing your time. > On 18 juil. 2018, at 22:07, Grzegorz Junka <[email protected]> wrote: > > Sometimes I am receiving messages like this from my server: > > nas.myserver.mydomain.com login failures: > Jul 17 08:35:02 nas sshd[5994]: reverse mapping checking getaddrinfo for > 162.132-254-62.static.virginmediabusiness.co.uk [62.254.132.162] failed - > POSSIBLE BREAK-IN ATTEMPT! > > On different days they are from different IPs and they would-be mapped to > different reverse dns names. How to deal with those messages/attempts? > > GrzegorzJ > > _______________________________________________ > [email protected] mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "[email protected]" _______________________________________________ [email protected] mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "[email protected]"
