public-l AT list.denic.de

Subject: Public DENIC mailinglist

List archive

Re: unapproved AXFR von sequoia.TechFak.Uni-Bielefeld.DE ...

From: henning.brauer AT bsmail.de
To: LON-Hostmaster <hostmaster AT little-oaks.net>
Cc: public-l AT denic.de
Subject: Re: unapproved AXFR von sequoia.TechFak.Uni-Bielefeld.DE ...
Date: Fri, 1 Sep 2000 18:15:03 +0200

jepp, bei uns hat ers auch versucht....

2000-08-30 01:01:40.623456500 tcpserver: pid 5645 from 129.70.132.4
2000-08-30 01:01:40.650586500 tcpserver: deny 5645 0:213.128.133.188:53
:129.70.132.4:33180
2000-08-30 01:16:59.617161500 tcpserver: pid 8852 from 129.70.132.4
2000-08-30 01:16:59.639757500 tcpserver: deny 8852 0:213.128.133.188:53
:129.70.132.4:35113
2000-08-30 01:45:28.460943500 tcpserver: pid 13947 from 129.70.132.4
2000-08-30 01:45:28.490524500 tcpserver: deny 13947 0:213.128.133.188:53
:129.70.132.4:38950
2000-08-30 10:30:10.418595500 tcpserver: pid 15683 from 129.70.132.4
2000-08-30 10:30:10.419650500 tcpserver: deny 15683 0:213.128.133.188:53
:129.70.132.4:55516
2000-08-30 23:45:30.868673500 tcpserver: pid 27898 from 129.70.132.4
2000-08-30 23:45:30.897528500 tcpserver: deny 27898 0:213.128.133.188:53
:129.70.132.4:37217
2000-08-31 05:49:41.201925500 tcpserver: pid 2444 from 129.70.132.4
2000-08-31 05:49:41.203011500 tcpserver: deny 2444 0:213.128.133.188:53
:129.70.132.4:47286
2000-08-31 05:50:52.717894500 tcpserver: pid 2883 from 129.70.132.4
2000-08-31 05:50:52.719224500 tcpserver: deny 2883 0:213.128.133.188:53
:129.70.132.4:47424
2000-08-31 08:07:38.628001500 tcpserver: pid 25937 from 129.70.132.4
2000-08-31 08:07:38.657538500 tcpserver: deny 25937 0:213.128.133.188:53
:129.70.132.4:38642
2000-08-31 18:48:27.802714500 tcpserver: pid 336 from 129.70.132.4
2000-08-31 18:48:27.828099500 tcpserver: deny 336 0:213.128.133.188:53
:129.70.132.4:35976
2000-08-31 19:45:44.945698500 tcpserver: pid 13125 from 129.70.132.4
2000-08-31 19:45:44.991040500 tcpserver: deny 13125 0:213.128.133.188:53
:129.70.132.4:48597
2000-08-31 21:00:50.896894500 tcpserver: pid 31024 from 129.70.132.4
2000-08-31 21:00:50.933502500 tcpserver: deny 31024 0:213.128.133.188:53
:129.70.132.4:33304
2000-08-31 21:05:30.194139500 tcpserver: pid 31806 from 129.70.132.4
2000-08-31 21:05:30.219648500 tcpserver: deny 31806 0:213.128.133.188:53
:129.70.132.4:34540
2000-09-01 08:13:49.823397500 tcpserver: pid 5137 from 129.70.132.4
2000-09-01 08:13:49.825974500 tcpserver: deny 5137 0:213.128.133.188:53
:129.70.132.4:48295

hast schon mal nen report an den zuständigen hostmaster gemacht?

gruss

henning
------------------------------------------------------------
Henning Brauer | Hostmaster BSWS
BS Web Services | www.bsws.de
Roedingsmarkt 14 | hostmaster AT bsws.de
20459 Hamburg
Germany

LON-Hostmaster

<hostmaster@little To: public-l AT denic.de

-oaks.net> cc:

Subject: unapproved AXFR
von sequoia.TechFak.Uni-Bielefeld.DE ...
01.09.2000 17:47

Hallo in die Runde,

mir ist schon mehrmals der Rechner 'sequoia.TechFak.Uni-Bielefeld.DE'
aufgefallen. Staendig versucht der sich die Zonen-Files von unseren
Domains zu ziehen, so wie es aussieht geht er alle DE-Domains in
alphabetischer Reihenfolge durch und das nicht nur auf unseren
Nameservern, auch befreundete Sys-Admins haben mir schon das gleiche
berichtet...

Meine Frage: Weiss jemand von Euch naehrers dazu ???

Wuerde mich ueber Antworten freuen!

Hier ein Log-Auszug:

Sep 1 17:31:15 neo tcplogd: domain connection attempt from
sequoia.TechFak.Uni-Bielefeld.DE [129.70.132.4]
Sep 1 17:31:15 neo named[15670]: unapproved AXFR from
[129.70.132.4].38841 for "roesrath-kultur.de" (acl)
Sep 1 17:31:54 neo tcplogd: domain connection attempt from
sequoia.TechFak.Uni-Bielefeld.DE [129.70.132.4]
Sep 1 17:31:54 neo named[15670]: unapproved AXFR from
[129.70.132.4].39044 for "roesrath.de" (acl)
Sep 1 17:31:56 neo tcplogd: domain connection attempt from
sequoia.TechFak.Uni-Bielefeld.DE [129.70.132.4]
Sep 1 17:31:56 neo named[15670]: unapproved AXFR from
[129.70.132.4].39057 for "roesrather-kreis.de" (acl)
....

Gruss
Markus Roch

--
--------------------------------------------------------------------------
Little Oaks Net OHG - Eiserweg 28 - D-51503 Roesrath
Tel 02205 919806-0 Fax 02205 919806-3 - e-Mail: hostmaster AT little-oaks.net
Amtsgericht Bergisch Gladbach - GF: Markus Roch, Christoph Grams
--------------------------------------------------------------------------

unapproved AXFR von sequoia.TechFak.Uni-Bielefeld.DE ..., LON-Hostmaster, 09/01/2000
- Re: unapproved AXFR von sequoia.TechFak.Uni-Bielefeld.DE ..., Gert Doering, Netmaster, 09/01/2000
  - Re: unapproved AXFR von sequoia.TechFak.Uni-Bielefeld.DE ..., Peter Koch, 09/01/2000
    - Re: unapproved AXFR von sequoia.TechFak.Uni-Bielefeld.DE ..., Philipp Buehler, 09/03/2000
- <Possible follow-up(s)>
- Re: unapproved AXFR von sequoia.TechFak.Uni-Bielefeld.DE ..., henning . brauer, 09/01/2000