Rise in attempts to update nameservers - TCP-IP

This is a discussion on Rise in attempts to update nameservers - TCP-IP ; Over the last few months I've seen this sort of thing becoming more and more frequent: >Jun 15 00:01:32 highland named[99]: denied update from [61.11.73.177].37600 for "insignia.com" IN >Jun 15 00:03:25 highland named[99]: denied update from [61.11.73.177].37622 for "insignia.com" IN ...

+ Reply to Thread
Results 1 to 2 of 2

Thread: Rise in attempts to update nameservers

  1. Rise in attempts to update nameservers

    Over the last few months I've seen this sort of thing becoming
    more and more frequent:

    >Jun 15 00:01:32 highland named[99]: denied update from [61.11.73.177].37600 for "insignia.com" IN
    >Jun 15 00:03:25 highland named[99]: denied update from [61.11.73.177].37622 for "insignia.com" IN
    >Jun 15 00:06:39 highland named[99]: denied update from [24.6.244.219].18604 for "insignia.com" IN
    >Jun 15 00:08:25 highland named[99]: denied update from [61.11.73.177].37664 for "insignia.com" IN
    >Jun 15 00:08:27 highland named[99]: denied update from [61.11.73.177].37670 for "insignia.com" IN


    At first it was machines belonging to comcast. I sent mail to their abuse
    address but all I ever got was autoreplies, never a real response. Now I
    see it more and more to the point where I'm getting hundreds every day.

    What's causing this and should I be worried about it?

    --
    Jim Hatfield

  2. Re: Rise in attempts to update nameservers

    Jim Hatfield schrieb:
    > Over the last few months I've seen this sort of thing becoming
    > more and more frequent:
    >
    >
    >>Jun 15 00:01:32 highland named[99]: denied update from [61.11.73.177].37600 for "insignia.com" IN
    >>Jun 15 00:03:25 highland named[99]: denied update from [61.11.73.177].37622 for "insignia.com" IN
    >>Jun 15 00:06:39 highland named[99]: denied update from [24.6.244.219].18604 for "insignia.com" IN
    >>Jun 15 00:08:25 highland named[99]: denied update from [61.11.73.177].37664 for "insignia.com" IN
    >>Jun 15 00:08:27 highland named[99]: denied update from [61.11.73.177].37670 for "insignia.com" IN

    >
    >
    > At first it was machines belonging to comcast. I sent mail to their abuse
    > address but all I ever got was autoreplies, never a real response. Now I
    > see it more and more to the point where I'm getting hundreds every day.
    >
    > What's causing this and should I be worried about it?
    >


    Most often these are window machines, which try to "register" their
    hostname.
    https://secure.xtremeweb.de/dns/disc...tml?1040601208

    Torsten

+ Reply to Thread