Hello,
After fresh install of Interworx 5.1.x on Centos 6.8 I got the following in DNS logs, somebody meet something similar?
thanks,
22:32:48.243932500 00000000000000000000ffff5d71aee1:d2e0:efcc - 0001 adobe.com
Hi Bblori
I hope your well
I sometimes see very similar enries in DNS, even on some IP addresses not in use for NS/DNS (see below), so it is likely to be a query from another pc or person to test if your DNS is open relay or it maybe a website on your server requesting dns for adobe etc…
I myself do not worry about these entries on IP addresses not used for NS/DNS after I have confirmed the server is not open relay.
I hope that helps a little
Many thanks
John
2016-10-05 05:16:27.307645500 00000000000000000000ffffcc2afd02:a59d:5a97 - 0001 4cd013de.openresolvertest.net2016-10-05 04:59:19.767315500 00000000000000000000ffff4a522f16:3e60:face - 0001 dnsscan.shadowserver.org2016-10-05 04:44:03.861013500 00000000000000000000ffff4706d836:0035:34ef C 0010 version.bind2016-10-05 03:49:33.134487500 00000000000000000000ffffbf60f974:ebfa:5b02 - 00ff smart.gov2016-10-05 02:43:03.199707500 00000000000000000000ffffd17e8802:c8b5:e742 - 0001 a.gtld-servers.net 2016-10-04 18:08:57.459299500 00000000000000000000ffffb738ac91:4e20:bf5a - 0001 2539297029.www.baidu.com2016-10-04 14:15:44.268444500 00000000000000000000ffffa4846042:8a27:23c6 - 0001 cpsc.gov2016-10-04 12:07:58.870425500 00000000000000000000ffff5bd26828:d0f6:23c6 - 00ff .2016-10-04 06:30:26.406262500 00000000000000000000ffffb95e6f01:ca2f:9de0 - 00ff com2016-10-04 04:10:26.232594500 00000000000000000000ffffc614454a:c23b:afbd - 0001 direct.shodan.io2016-10-04 04:10:24.953583500 00000000000000000000ffffc614454a:3da4:34ef C 0010 version.bind2016-10-04 03:04:07.933813500 00000000000000000000ffff4a522f1a:46a9:face - 0001 dnsscan.shadowserver.org2016-10-04 01:46:21.820335500 00000000000000000000ffff6ab8021d:dce7:107a - 0001 www.qq.com