What is it?
Rodrigo Ramos <[email protected]> Mon, 30 May 2005 15:10:15 -0300
| Newsgroups | gmane.comp.security.intrusions,gmane.comp.security.basics,gmane.comp.security.events |
|---|---|
| Message-ID | <1117476615.5741.142.camel@ZeroOne> |
Hi, I am seen it many times per day in one of our machines? Anybody have been hit by it? Others blocks of machines are coming too. May 28 03:00:00 brasil named[1664]: lame server resolving 'blackdove.net' (in 'blackdove.NET'?): 216.109.116.20#53 May 28 03:00:00 brasil named[1664]: lame server resolving 'jordydejong.com' (in 'jordydejong.com'?): 216.147.1.37#53 May 28 03:00:00 brasil named[1664]: lame server resolving 'blackdove.net' (in 'blackdove.NET'?): 66.218.71.205#53 May 28 03:00:01 brasil named[1664]: lame server resolving 'jordydejong.com' (in 'jordydejong.com'?): 216.147.28.113#53 May 28 03:00:01 brasil named[1664]: lame server resolving 'blackdove.net' (in 'blackdove.NET'?): 216.109.116.20#53 May 28 03:00:01 brasil named[1664]: lame server resolving 'jordydejong.com' (in 'jordydejong.com'?): 216.147.28.113#53 May 28 03:00:01 brasil named[1664]: lame server resolving 'blackdove.net' (in 'blackdove.NET'?): 66.218.71.205#53 May 28 03:00:01 brasil named[1664]: lame server resolving 'jordydejong.com' (in 'jordydejong.com'?): 216.147.1.37#53 May 28 03:00:01 brasil named[1664]: lame server resolving 'blackdove.net' (in 'blackdove.NET'?): 216.109.116.20#53 May 28 03:00:01 brasil named[1664]: lame server resolving 'jordydejong.com' (in 'jordydejong.com'?): 216.147.1.37#53 May 28 03:00:01 brasil named[1664]: lame server resolving 'blackdove.net' (in 'blackdove.NET'?): 66.218.71.205#53 May 28 03:00:01 brasil named[1664]: lame server resolving 'jordydejong.com' (in 'jordydejong.com'?): 216.147.28.113#53 May 28 03:00:01 brasil named[1664]: lame server resolving 'blackdove.net' (in 'blackdove.NET'?): 216.109.116.20#53 May 28 03:00:01 brasil named[1664]: lame server resolving 'jordydejong.com' (in 'jordydejong.com'?): 216.147.1.37#53 May 28 03:00:02 brasil named[1664]: lame server resolving 'jordydejong.com' (in 'jordydejong.com'?): 216.147.28.113#53 May 28 03:00:02 brasil named[1664]: lame server resolving 'blackdove.net' (in 'blackdove.NET'?): 66.218.71.205#53 May 28 03:00:04 brasil named[1664]: lame server resolving 'fsbti.com' (in 'fsbti.com'?): 66.150.15.226#53 May 28 03:00:04 brasil named[1664]: lame server resolving 'fsbti.com' (in 'fsbti.com'?): 67.89.232.133#53 Best regards, -- Rodrigo Ramos 55 81 3463.1593 55 81 8851.3524 http://www.triforsec.com.br http://www.defenselayer.com _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions