Curious log entries

Michael Voight mvoight at cisco.com
Wed Aug 25 20:42:04 UTC 1999


Well, if it's an attack, it is someone on your network.
This indicates 209.204.145.52 is trying to dynamically update the
reverse zone. Is it supposed to?

Michael


Kelsey Cummings wrote:
> 
> I recent noticed these entries (there are more) in my syslogs.  I curious if
> this could be the a DOS attack or just someone poking around.  Should I be
> concerned?
> 
> Aug 25 11:58:56 athena named[80321]: unapproved update from
> [209.204.145.52].4593 for 145.204.209.in-addr.arpa
> Aug 25 12:08:58 athena named[80321]: unapproved update from
> [209.204.145.52].4644 for 145.204.209.in-addr.arpa
> 
> -----------------------------------------------------------------
> Kelsey Cummings
> System Administrator
> NetEase, Inc.
> kc at neteze.com
> -----------------------------------------------------------------


More information about the bind-users mailing list