lame server resolving logs, hack?

José Nuno Neto jose.neto at teiadearanha.com
Mon Mar 1 13:40:10 UTC 2004


Hi,

I run Bind on a hosting server, as a caching name server for local 
services and authority for some domains.
Since last week I have /var/log/messages flooded with the records below.
What is 'lame server resolving'?
Is this a hack attack?
What can I do?


/var/log/messages (snip)

Mar  1 19:26:00 bob named[6845]: lame server resolving 
'226.163.84.81.proxies.relays.monkeys.com' (in 
'proxies.relays.monkeys.com'?): 194.158.102.14#53
Mar  1 19:26:00 bob named[6845]: lame server resolving 
'226.163.84.81.proxies.relays.monkeys.com' (in 
'proxies.relays.monkeys.com'?): 66.33.216.216#53
Mar  1 19:26:01 bob named[6845]: lame server resolving 
'226.163.84.81.proxies.relays.monkeys.com' (in 
'proxies.relays.monkeys.com'?): 203.10.1.17#53
Mar  1 19:31:59 bob named[6845]: lame server resolving 
'70.66.218.66.proxies.relays.monkeys.com' (in 
'proxies.relays.monkeys.com'?): 216.206.238.5#53
Mar  1 19:31:59 bob named[6845]: lame server resolving 
'70.66.218.66.proxies.relays.monkeys.com' (in 
'proxies.relays.monkeys.com'?): 216.206.38.5#53
Mar  1 19:31:59 bob named[6845]: lame server resolving 
'70.66.218.66.proxies.relays.monkeys.com' (in 
'proxies.relays.monkeys.com'?): 209.17.93.93#53
Mar  1 19:31:59 bob named[6845]: lame server resolving 
'70.66.218.66.proxies.relays.monkeys.com' (in 
'proxies.relays.monkeys.com'?): 66.33.206.206#53
Mar  1 19:39:17 bob named[6845]: lame server resolving 
'142.233.193.81.proxies.relays.monkeys.com' (in 
'proxies.relays.monkeys.com'?): 194.158.102.14#53
Mar  1 19:39:18 bob named[6845]: lame server resolving 
'142.233.193.81.proxies.relays.monkeys.com' (in 
'proxies.relays.monkeys.com'?): 66.33.216.216#53
Mar  1 19:43:06 bob named[6845]: lame server resolving 
'88.237.13.213.proxies.relays.monkeys.com' (in 
'proxies.relays.monkeys.com'?): 216.206.238.5#53
Mar  1 19:43:06 bob named[6845]: lame server resolving 
'88.237.13.213.proxies.relays.monkeys.com' (in 
'proxies.relays.monkeys.com'?): 216.206.38.5#53
Mar  1 19:43:06 bob named[6845]: lame server resolving 
'88.237.13.213.proxies.relays.monkeys.com' (in 
'proxies.relays.monkeys.com'?): 209.17.93.93#53
Mar  1 19:43:06 bob named[6845]: lame server resolving 
'88.237.13.213.proxies.relays.monkeys.com' (in 
'proxies.relays.monkeys.com'?): 66.33.206.206#53
Mar  1 19:43:06 bob named[6845]: lame server resolving 
'88.237.13.213.proxies.relays.monkeys.com' (in 
'proxies.relays.monkeys.com'?): 203.10.1.17#53


-- Best Regards, Jose' Nuno Neto Liber4e Consultoria Informática LDA 
WEB: www.liber4e.com TLF:00 351 962808587 || Switch 2 Linux ||






More information about the redhat-list mailing list