messages log
I see a lot of these messages, what do they mean?
Also, i get a huge amount of IP block messages in this log file. Is this normal? Or should i take extra action with extra software, if so, what would you recommend?
Nov 28 21:33:20 vps1 named[730]: client 217.6.54.48#65095: view external: query (cache) 'domain.nl/MX/IN' denied
Nov 28 21:33:20 vps1 named[730]: client 217.6.54.48#50210: view external: query (cache) 'domain.nl/MX/IN' deniedAlso, i get a huge amount of IP block messages in this log file. Is this normal? Or should i take extra action with extra software, if so, what would you recommend?
Nov 28 21:12:45 vps1 PAM-hulk[12983]: Brute force detection active: 580 LOGIN DENIED -- TOO MANY FAILURES -- IP TEMP BANNED
Nov 28 21:12:45 vps1 PAM-hulk[13162]: Brute force detection active: 580 LOGIN DENIED -- TOO MANY FAILURES -- IP TEMP BANNED-
Hello :) There are a few threads about this particular issue. Here are some you may find helpful: why named logging query cache denied to /var/log/messages? DNS Attack - Advice Needed Thank you. 0
Please sign in to leave a comment.
Comments
1 comment