[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Messages entry



> Can someone help me out with these entries.  I have several of these in my
> logs files lately
>
> Dec  3 15:30:35 www named[17672]: Response from unexpected source
> ([152.163.159.230].51) for query "DNS-07.NS.aol.com IN AAAA"
> Dec  3 15:30:35 www named[17672]: Response from unexpected source
> ([205.188.157.227].53) for query "DNS-02.NS.aol.com IN AAAA"
> Dec  3 15:31:13 www named[17672]: Response from unexpected source
> ([152.163.159.225].50) for query "DNS-06.NS.aol.com IN A6"
> Dec  3 15:31:20 www named[17672]: Response from unexpected source
> ([149.174.211.14].53) for query "DNS-01.NS.aol.com IN A6"
> Dec  3 15:31:58 www named[17672]: Response from unexpected source
> ([149.174.211.13].53) for query "DNS-02.NS.aol.com IN A6"
>
>
I also noticed this have I been hacked


Dec  3 18:50:19 www sshd[1054]: Accepted password for root from
216.40.193.233 port 1042
Dec  3 18:50:19 www PAM_pwdb[1054]: (sshd) session opened for user root by
(uid=0)
Dec  3 18:50:23 www PAM_pwdb[1054]: (sshd) session closed for user root