We routinely ssh to systems hosted by a provider that is notoriously bad about maintaining proper PTR records, so I’m accustomed to seeing the POSSIBLE BREAK-IN ATTEMPT! messages every time I login. There isn’t much point in having the provider fix the way the systems are listed in DNS because we’re the only people that access these systems in this manner. We have scripts that access multiple systems in an automated fashion and provide information. The POSSIBLE BREAK-IN ATTEMPT messages really mess up the way the information is presented. We could use 2> /dev/null, of course, but this (turning off GSSAPIAuthentication) is a better way to do it.