Thousands of "lame server resolving" lines in /var/log/messages
All of a sudden I see some 2500 lines of "lame server resolving" messages in /var/log/messages on a low traffic web server (some 500-600 daily visitors), like this:
May 23 16:58:35 host named: lame server resolving '188.8.131.52.in-addr.arpa' (in '184.108.40.206.in-addr.arpa'?): 220.127.116.11#53
They started at 16:58:35 and seem like ended (for this turn?) at 17:31:47.
There are altogether some 500-600 different IP's referred to.
Is this an attack? If yes, what might be its target and how to defend it?
Server was newly, fully reinstalled after it had been rooted a few days ago. Kernel is 2.4.20-8, RH 9 with cPanel, no firewall installed.
how could I send the requests to an advertising page or page of my choosing?
Server$Hit.com Reseller/Hosting For Real People WebHostingAccess Trial Accounts Upon Request www.ForALaugh.com Get over IT Get over yourself
Yahoo IM: concreteseller | Toll Free Support: 1-888-603-5305 | Like the Maytag repairman