Topic: log files

[John]

I am just getting started on learning about log files.   /var/log/security has a entry that has me concerned.     it says something about AUTH    and a strange IP address.   Does AUTH mean that that IP has gained access?  I ran a traceroute and the IP is somewhere in Russia!