[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] Unexpected Source THEN Crash



> >
> > My server went down for the first time in about six months 
> tonight. These
> > are the last 3 entries in the messages log before it died.
> >
> > Aug 30 21:08:36 ns named[388]: Response from unexpected source
> > ([152.163.159.225].53)
> > Aug 30 21:08:40 ns named[388]: Response from unexpected source
> > ([205.188.157.225].53)
> > Aug 30 21:08:44 ns named[388]: Response from unexpected source
> > ([152.163.159.226].52)
> >
> >
> > Any ideas as to whats been going on?
> >
> > Regards
> >
> > Mark
> >
> 
> Maybe coincidence but i've just run chkrootkit and it come back with the
> following, what does it mean and how can I resolve?
> 
> Checking `bindshell'... warning, got bogus unix line.
> 
I just did a quick on yahoo for 'bindshell', here is one of the hits:

http://www.iss.net/security_center/static/5179.php

It looks like your system is compromised. Hope I'm wrong