Security Incidents mailing list archives

Re: unapproved update from [166.93.60.5].61946

From: jlewis () LEWIS ORG (Jon Lewis)
Date: Thu, 18 May 2000 17:14:26 -0400


Could just be a misconfigured Win2K box.

On Wed, 17 May 2000, James Ankenbrandt wrote:

I have been getting these for several days:

May 17 14:17:17 mail named[69]: unapproved update from [166.93.60.5].61946
for [mydomain deleted].com

What would anyone suggest?  I *assume* they are hostile,
but what to do?  As a relative newbie I would be grateful
for suggestions and/or pointers in the correct direction

Jim


----------------------------------------------------------------------
 Jon Lewis *jlewis () lewis org*|  I route
 System Administrator        |  therefore you are
 Atlantic Net                |
_________http://www.lewis.org/~jlewis/pgp for PGP public key__________

Current thread:

Re: LJK2 rootkit?, (continued)
- - - Re: LJK2 rootkit? Jens Hektor (May 17)
    - Re: LJK2 rootkit? Egon Barfuß jun. (May 17)
    - Korea Damian Gerow (May 17)
  - Re: IP Black list? Ryan Russell (May 16)
    - Re: IP Black list? Tabor J. Wells (May 16)
- Re: IP Black list? Luff, Darryl (May 15)
  - Re: IP Black list? Michael Damm (May 15)
    - Re: IP Black list? jms (May 15)
    - TCP/IP options flags? Matt Beck (May 16)
    - unapproved update from [166.93.60.5].61946 James Ankenbrandt (May 17)
    - Re: unapproved update from [166.93.60.5].61946 Jon Lewis (May 18)
- Re: IP Black list? Volker Werth [VWSoft] (May 16)
- Re: IP Black list? Elliot Perrin (May 16)
  - Sniffer files Wozz (May 16)
    - Re: Sniffer files Randy Janinda (May 18)
    - Re: Sniffer files Robert Graham (May 18)
  - Re: IP Black list? Paul L Schmehl (May 16)
  - Re: IP Black list? Joe McAlerney (May 16)
- Re: IP Black list? Robert G. Ferrell (May 16)
- Re: IP Black list? Tarkington, William (W.) (May 16)
- Re: IP Black list? Elliot Perrin (May 17)