freebsd security - Jul 2018 - Possible break-in attempt?

Sometimes I am receiving messages like this from my server:

nas.myserver.mydomain.com login failures:
Jul 17 08:35:02 nas sshd[5994]: reverse mapping checking getaddrinfo for 
162.132-254-62.static.virginmediabusiness.co.uk [62.254.132.162] failed 
- POSSIBLE BREAK-IN ATTEMPT!

On different days they are from different IPs and they would-be mapped 
to different reverse dns names. How to deal with those messages/attempts?

GrzegorzJ

Hi,

You can ignore them totally (you should), and if you can't, make sure you
limit possibility of brute force attack on your sshd:
- configure a firewall to stop them
- and/or activate blacklistd on sshd
- and/or change listening port of sshd 

I get thousands of these every day, won't kill you and not worth losing your
time.
> On 18 juil. 2018, at 22:07, Grzegorz Junka <list1 at gjunka.com>
wrote:
> 
> Sometimes I am receiving messages like this from my server:
> 
> nas.myserver.mydomain.com login failures:
> Jul 17 08:35:02 nas sshd[5994]: reverse mapping checking getaddrinfo for
162.132-254-62.static.virginmediabusiness.co.uk [62.254.132.162] failed -
POSSIBLE BREAK-IN ATTEMPT!
> 
> On different days they are from different IPs and they would-be mapped to
different reverse dns names. How to deal with those messages/attempts?
> 
> GrzegorzJ
> 
> _______________________________________________
> freebsd-security at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe at
freebsd.org"