The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Security Violations

Discussion in 'Security' started by Domenico, Jun 24, 2002.

  1. Domenico

    Domenico Well-Known Member

    Joined:
    Aug 14, 2001
    Messages:
    362
    Likes Received:
    0
    Trophy Points:
    16
    Hi all,

    For the last MONTHS everyday there are really lots of the following lines in my log files:

    Jun 22 04:02:09 host named-wrapper[5743]: client 209.208.143.194#3832: updating zone 'SAMEDOMAIN.com/IN': update failed:
    'RRset exists (value dependent)' prerequisite not satisfied (NXRRSET)
    Jun 22 04:02:09 host named-wrapper[5743]: client 209.208.143.194#3835: update 'SAMEDOMAIN.com/IN' denied

    Why is that person/company doing this?
    It's a good domainname I can imagine people want to steal so has this something to do with it?

    Thank you,
    Domenico
     
  2. Domenico

    Domenico Well-Known Member

    Joined:
    Aug 14, 2001
    Messages:
    362
    Likes Received:
    0
    Trophy Points:
    16
    Does nobody has a clue ?
     
  3. rpmws

    rpmws Well-Known Member

    Joined:
    Aug 14, 2001
    Messages:
    1,824
    Likes Received:
    5
    Trophy Points:
    38
    Location:
    back woods of NC, USA
    I get about 4.7 billion of these a day .It's a Win2k box somewhere and the default install make win2k try to update DNS servers for DHCP or something. Do a search on Google for that erro and you will see it's to do with Win2K installs floating around on the net. If they go in Network settings and disable update dns it will stop it. I don't know how to get it out of the bind logs yet either.
     
  4. Domenico

    Domenico Well-Known Member

    Joined:
    Aug 14, 2001
    Messages:
    362
    Likes Received:
    0
    Trophy Points:
    16
    But these are all from the same IP for the same domain name.
     
Loading...

Share This Page