[PLUG] auth.log

Marv lamsokvr at xprt.net
Sun Mar 14 19:39:02 UTC 2004


Can someone shed some light on this line in my auth.log??



Time stamp 16:09:54

Mar 10 16:05:32 kosmal sshd[27004]: Accepted password for mlapp0039 from
66.42.36.140 port 1548 ssh2
Mar 10 16:05:36 kosmal sshd[27004]: subsystem request for sftp
Mar 10 16:09:47 kosmal sshd[27009]: Accepted password for mlapp0039 from
66.42.36.140 port 1552
Mar 10 16:09:54 kosmal sshd[27011]: reverse mapping checking getaddrinfo
for 66-42-36-140.sttl.dial.netzero.com 
failed - POSSIBLE BREAKIN ATTEMPT!
Mar 10 16:09:54 kosmal login[27011]: `mlapp0039' logged in  on `pts/0'
from `66.42.36.140'
Mar 10 16:49:17 kosmal sshd[27027]: Accepted password for sdura8536 from
67.42.6.223 port 33422 ssh2
Mar 10 16:49:18 kosmal sshd[27027]: subsystem request for sftp
Mar 10 16:55:50 kosmal sshd[27032]: Accepted password for sdura8536 from
67.42.6.223 port 33767 ssh2
Mar 10 16:55:50 kosmal sshd[27032]: subsystem request for sftp
Mar 10 16:56:13 kosmal sshd[27037]: Accepted password for sdura8536 from
67.42.6.223 port 33150 ssh2
Mar 10 16:56:13 kosmal sshd[27037]: subsystem request for sftp

What is "reverse mapping checking getaddrinfo for
66-42-36-140.sttl.dial.netzero.com" all about??


TIA

Marvin






More information about the PLUG mailing list