[PLUG] SSH Log Entry Question

[Alan]

On Wed, 2005-04-06 at 06:04 -0700, Rich Shepard wrote:
>    I would appreciate having someone explain these entries in the sshd log:
> 
> **Unmatched Entries**
> warning: /etc/hosts.allow, line 8: host name/name mismatch: freshweb.pl != webus01.freshweb.pl
> warning: /etc/hosts.allow, line 8: host name/name mismatch: freshweb.pl != webus01.freshweb.pl
> 
>    The referenced line in /etc/hosts.allow is:
> 
> ALL: LOCAL @appl-ecosys.com
> 
>    I've seen many other cracking attempts, but the messages of those relate to
> unknown users or incorrect passwords (for unknown users). This has me
> puzzled.

freshweb.pl has their name resolving oddly.  I was scanned by the same
site.

I don't use hosts.allow.  (I have too many times  need to connect to
work servers from coffee shops.)

-- 
"If any sign of pleasure is exhibited,
 report to me and it will be prohibited.
 So shall it be! This is the Land of the Free!"
                  - George W. Firefly