Doug Crompton on 24 Jul 2007 20:13:13 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

RE: [PLUG] ssh brute force attacks & real time offending IP lists


Talking about this I get the following in my messages file several time a
day, often once an hour.

Jul 24 15:44:32 slate named[18925]: client 172.188.106.247#56566: updating
zone 'crompton.com/IN': update unsuccessf
ul: JohnDell.crompton.com/A: 'RRset exists (value dependent)' prerequisite
not satisfied (NXRRSET)
Jul 24 15:44:32 slate named[18925]: client 172.188.106.247#56569: update
'crompton.com/IN' denied

Jul 24 15:59:52 slate named[18925]: client 172.200.40.52#56570: updating
zone 'crompton.com/IN': update unsuccessful
: Laptop.crompton.com/A: 'RRset exists (value dependent)' prerequisite not
satisfied (NXRRSET)
Jul 24 15:59:52 slate named[18925]: client 172.200.40.52#56573: update
'crompton.com/IN' denied


Always directed to JohnDell or laptop, neither of which exist. The
offending IP is AOL and th IP's ocaasionaly change but are always within
AOL IP space.

I am primary for this (my) domain, crompton.com

Doug


****************************
*  Doug Crompton	   *
*  Richboro, PA 18954	   *
*  215-431-6307		   *
*		  	   *
* doug@crompton.com        *
* http://www.crompton.com  *
****************************


___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug