Topic: Is it hacked by some one?

[davidyip]

Dear all:

I find some message in my Server Log.

May 23 01:21:02 sme named[1846]: lame server resolving 'taniosmenhem.com' (in 'taniosmenhem.com'?): 212.43.194.83#53
May 23 01:21:04 sme named[1846]: lame server resolving 'taniosmenhem.com' (in 'taniosmenhem.com'?): 80.168.69.10#53
May 23 01:21:04 sme named[1846]: lame server resolving 'taniosmenhem.com' (in 'taniosmenhem.com'?): 212.43.194.83#53
May 23 01:21:06 sme named[1846]: lame server resolving 'taniosmenhem.com' (in 'taniosmenhem.com'?): 80.168.69.10#53
May 23 01:21:06 sme named[1846]: lame server resolving 'taniosmenhem.com' (in 'taniosmenhem.com'?): 212.43.194.83#53
May 23 01:21:11 sme named[1846]: lame server resolving 'taniosmenhem.com' (in 'taniosmenhem.com'?): 80.168.69.10#53
May 23 01:21:11 sme named[1846]: lame server resolving 'taniosmenhem.com' (in 'taniosmenhem.com'?): 212.43.194.83#53
May 23 01:21:12 sme named[1846]: lame server resolving 'dotnow.com' (in 'dotnow.com'?): 66.117.140.96#53
May 23 01:21:12 sme named[1846]: lame server resolving 'dotnow.com' (in 'dotnow.com'?): 66.117.151.5#53
May 23 01:21:13 sme named[1846]: lame server resolving 'dotnow.com' (in 'dotnow.com'?): 66.117.151.5#53
May 23 01:21:13 sme named[1846]: lame server resolving 'dotnow.com' (in 'dotnow.com'?): 66.117.140.96#53
May 23 01:21:15 sme named[1846]: lame server resolving 'dotnow.com' (in 'dotnow.com'?): 66.117.151.5#53
May 23 01:21:15 sme named[1846]: lame server resolving 'dotnow.com' (in 'dotnow.com'?): 66.117.140.96#53
May 23 01:21:16 sme named[1846]: lame server resolving 'dotnow.com' (in 'dotnow.com'?): 66.117.151.5#53
May 23 01:21:16 sme named[1846]: lame server resolving 'dotnow.com' (in 'dotnow.com'?): 66.117.140.96#53

I don't know what is it. Is it hacked by some one.

David Yip.

*I will upgrade the server as soon as possible but it is production one. I afraid it will crash after upgrade. I will do some more testing for that.

[byte]

Dear all:

May 23 01:21:04 sme named[1846]: lame server resolving 'taniosmenhem.com' (in 'taniosmenhem.com'?): 212.43.194.83#53

No you haven't been hacked by what the above line say's, all that means is that "lame" is exactly what it means i.e these servers have not been configured properly by the respective netblock owner's. This is out of our control so you can safely ignore these. I used to get few these on my server!

Yes you should upgrade as this time you may been lucky...Next time may not be the case

Hope this helps!

[davidyip]

Thanks for your help!

In Christ,
David Yip [/quote]