|
-
February 10th, 2005, 01:53 PM
#1
Possible attack? Funny DNS requests
Hi there i am wondering if anyone can help me out. I have a Linux server hosting about 70 domains. Lately i have been noticing in my logs /var/log/messages following requests
Feb 10 02:43:42 gipsy named[572]: lame server resolving '83.52.225.82.ipwhois.rfc-ignorant.org' (in 'ipwhois.rfc-ignorant.org'?): 127.0.0.1#53
Feb 10 02:43:55 gipsy named[572]: lame server resolving '53.16.22.216.ipwhois.rfc-ignorant.org' (in 'ipwhois.rfc-ignorant.org'?): 127.0.0.1#53
Sometimes its up to three a second. Searched on google for similar behavior and found nothing. Has anyone seen this before? Could it be that my server is blacklisted? Or could it be some kind of hack?
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|