Is someone trying to hack my dns and illegally transfer merecords?

Eivind Olsen eivind.olsen at ttyl.com
Wed Dec 19 22:42:48 UTC 2001


--On 19. desember 2001 18:48 +0000 Paul <p2000j at yahoo.com> wrote:
>  Hi.
>  I have noticed that in my logs it shows the message;
>
> named[741]: client 128.177.195.11#60877: zone transfer denied
>
> Hundreds of times.  The address is not one of our secondaries and I do
> not  recognize the above address. Why do I have this message?  Could
> someone be  trying to do an unauthorized transfer of our domain's?  What
> do I do about  this?

My guess is that you purchase/use the GNS service from Nominum, or the free 
secondary.com service.
The IP-address you listed belongs to Nominum.

Talk to Nominum about this, they can probably help you more with the 
details of why this happens.

-- 
Talk To You Later
Eivind Olsen




More information about the bind-users mailing list