[nos-bbs] Crashing every 4 days?

Gustavo Ponza g.ponza at tin.it
Thu Sep 12 13:47:32 EDT 2013


Hi all,

I suspected that failures was caused by some
attackers but remained silent to not scary
someone :)

My systems are object of attack since the last
fall/winter, so I've night ad day several 'hosts'
on my 'linux-hotel' in Rome :)

The following are working here just now...
so don't scary about them...

73, gus i0ojj

----------------------------------cut here-------------------------------
a.packetdevil.com.    0    IN    A    204.11.53.84
a.packetdevil.com.    0    IN    A    204.11.53.39
a.packetdevil.com.    0    IN    A    204.11.52.178
a.packetdevil.com.    0    IN    A    204.11.53.107
a.packetdevil.com.    0    IN    A    204.11.53.58
a.packetdevil.com.    0    IN    A    204.11.53.23
a.packetdevil.com.    0    IN    A    204.11.53.47
a.packetdevil.com.    0    IN    A    204.11.52.154
a.packetdevil.com.    0    IN    A    204.11.53.35
a.packetdevil.com.    0    IN    A    204.11.53.101
a.packetdevil.com.    0    IN    A    204.11.53.75
a.packetdevil.com.    0    IN    A    204.11.52.209
a.packetdevil.com.    0    IN    A    204.11.52.240
a.packetdevil.com.    0    IN    A    204.11.52.146
a.packetdevil.com.    0    IN    A    204.11.52.198
a.packetdevil.com.    0    IN    A    204.11.53.44
a.packetdevil.com.    0    IN    A    204.11.53.108
a.packetdevil.com.    0    IN    A    204.11.52.192
a.packetdevil.com.    0    IN    A    204.11.52.155
a.packetdevil.com.    0    IN    A    204.11.53.66
dnsscan.shadowserver.org.    0    IN    A    46.244.22.11
.    0    IN    SOA    a.root-servers.net.    nstld.verisign-grs.com.    
2013091001    1800    900    604800    86400
anonsc.com.    0    IN    SOA    ns1.anonsc.com.    bro.anonsc.com.    
2012291001    28800    86400    3600000    86400
isc.org.    0    IN    NS    ams.sns-pb.isc.org.
isc.org.    0    IN    NS    ns.isc.afilias-nst.info.
openresolverproject.org.    0    IN    A    204.42.254.5
65cf69a0.openresolverproject.org.    0    IN    CNAME    
openresolverproject.org.
zhaosf.com.    0    IN    A    66.102.253.94
2soe.ru.    0    IN    SOA    ns1.reg.ru.    hostmaster.ns1.reg.ru.    
1377038128    14400    3600    604800    21600
2soe.ru.    0    IN    A    204.46.43.42
2soe.ru.    0    IN    A    204.46.43.11
2soe.ru.    0    IN    A    204.46.43.165
2soe.ru.    0    IN    A    204.46.43.4
2soe.ru.    0    IN    A    204.46.43.201
2soe.ru.    0    IN    A    204.46.43.81
2soe.ru.    0    IN    A    204.46.43.28
2soe.ru.    0    IN    A    204.46.43.175
2soe.ru.    0    IN    A    204.46.43.74
2soe.ru.    0    IN    A    204.46.43.51
2soe.ru.    0    IN    A    204.46.43.90
2soe.ru.    0    IN    A    204.46.43.182
2soe.ru.    0    IN    A    204.46.43.147
2soe.ru.    0    IN    A    204.46.43.135
2soe.ru.    0    IN    A    204.46.43.32
2soe.ru.    0    IN    A    204.46.43.109
2soe.ru.    0    IN    A    204.46.43.114
2soe.ru.    0    IN    A    204.46.43.128
2soe.ru.    0    IN    A    204.46.43.94
anonsc.com.    0    IN    A    123.45.67.22
anonsc.com.    0    IN    A    123.45.67.117
anonsc.com.    0    IN    A    123.45.67.69
anonsc.com.    0    IN    A    123.45.67.62
anonsc.com.    0    IN    A    123.45.67.159
anonsc.com.    0    IN    A    123.45.67.56
anonsc.com.    0    IN    A    123.45.67.23
anonsc.com.    0    IN    A    123.45.67.66
anonsc.com.    0    IN    A    123.45.67.126
anonsc.com.    0    IN    A    123.45.67.140
anonsc.com.    0    IN    A    123.45.67.41
anonsc.com.    0    IN    A    123.45.67.119
anonsc.com.    0    IN    A    123.45.67.89
anonsc.com.    0    IN    A    123.45.67.136
anonsc.com.    0    IN    A    123.45.67.179
anonsc.com.    0    IN    A    123.45.67.94
anonsc.com.    0    IN    A    123.45.67.68
anonsc.com.    0    IN    A    123.45.67.87
anonsc.com.    0    IN    A    123.45.67.197
anonsc.com.    0    IN    A    123.45.67.113
edelion.su.    0    IN    A    204.46.43.150
edelion.su.    0    IN    A    204.46.43.216
edelion.su.    0    IN    A    204.46.43.127
edelion.su.    0    IN    A    204.46.43.200
edelion.su.    0    IN    A    204.46.43.161
edelion.su.    0    IN    A    204.46.43.95
edelion.su.    0    IN    A    204.46.43.152
edelion.su.    0    IN    A    204.46.43.61
edelion.su.    0    IN    A    204.46.43.2
edelion.su.    0    IN    A    204.46.43.79
edelion.su.    0    IN    A    204.46.43.76
edelion.su.    0    IN    A    204.46.43.166
edelion.su.    0    IN    A    204.46.43.13
edelion.su.    0    IN    A    204.46.43.6
nasa.gov.    0    IN    SOA    ns1.nasa.gov.    dns.nasa.gov.    
200825202    7200    900    1209600    300
isc.org.    0    IN    A    149.20.64.69
hak4umz.net.    0    IN    SOA    ns1.hak4umz.net.    
skid.hak4umz.net.    2012291001    28800    86400    3600000    86400
ietf.org.    0    IN    NS    ns1.mia1.afilias-nst.info.
ietf.org.    0    IN    NS    ns0.ietf.org.
ietf.org.    0    IN    NS    ns1.yyz1.afilias-nst.info.
ietf.org.    0    IN    NS    ns1.hkg1.afilias-nst.info.
ietf.org.    0    IN    NS    ns1.ams1.afilias-nst.info.
ietf.org.    0    IN    NS    ns1.sea1.afilias-nst.info.
hak4umz.net.    0    IN    NS    ns2.hak4umz.net.
hak4umz.net.    0    IN    NS    ns1.hak4umz.net.
hak4umz.net.    0    IN    A    123.45.67.39
hak4umz.net.    0    IN    A    123.45.67.58
hak4umz.net.    0    IN    A    123.45.67.108
hak4umz.net.    0    IN    A    123.45.67.16
hak4umz.net.    0    IN    A    123.45.67.74
hak4umz.net.    0    IN    A    123.45.67.2
hak4umz.net.    0    IN    A    123.45.67.97
hak4umz.net.    0    IN    A    123.45.67.70
hak4umz.net.    0    IN    A    123.45.67.141
hak4umz.net.    0    IN    A    123.45.67.14
hak4umz.net.    0    IN    A    123.45.67.89
hak4umz.net.    0    IN    A    123.45.67.56
hak4umz.net.    0    IN    A    123.45.67.65
hak4umz.net.    0    IN    A    123.45.67.162
hak4umz.net.    0    IN    A    123.45.67.54
hak4umz.net.    0    IN    A    123.45.67.42
hak4umz.net.    0    IN    A    123.45.67.24
hak4umz.net.    0    IN    A    123.45.67.166
hak4umz.net.    0    IN    A    123.45.67.57
hak4umz.net.    0    IN    A    123.45.67.104
hackwhatlol.cc.    0    IN    A    204.46.43.162
hackwhatlol.cc.    0    IN    A    204.46.43.214
hackwhatlol.cc.    0    IN    A    204.46.43.70
hackwhatlol.cc.    0    IN    A    204.46.43.123
hackwhatlol.cc.    0    IN    A    204.46.43.194
hackwhatlol.cc.    0    IN    A    204.46.43.101
hackwhatlol.cc.    0    IN    A    204.46.43.209
hackwhatlol.cc.    0    IN    A    204.46.43.19
hackwhatlol.cc.    0    IN    A    204.46.43.150
hackwhatlol.cc.    0    IN    A    204.46.43.109
hackwhatlol.cc.    0    IN    A    204.46.43.161
hackwhatlol.cc.    0    IN    A    204.46.43.49
hackwhatlol.cc.    0    IN    A    204.46.43.163
hackwhatlol.cc.    0    IN    A    204.46.43.41
hackwhatlol.cc.    0    IN    A    204.46.43.206
hackwhatlol.cc.    0    IN    A    204.46.43.171
hackwhatlol.cc.    0    IN    A    204.46.43.85
hackwhatlol.cc.    0    IN    A    204.46.43.38
hackwhatlol.cc.    0    IN    A    204.46.43.87
hackwhatlol.cc.    0    IN    A    204.46.43.186
iana.org.    0    IN    A    192.0.43.8
txt.turkishajan.com.    0    IN    TXT    
ÿaaaa331qsdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdasssdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdasdassdas5533dasd¹
lineage2-game.ru.    0    IN    A    204.46.43.215
lineage2-game.ru.    0    IN    A    204.46.43.98
lineage2-game.ru.    0    IN    A    204.46.43.213
lineage2-game.ru.    0    IN    A    204.46.43.72
lineage2-game.ru.    0    IN    A    204.46.43.79
lineage2-game.ru.    0    IN    A    204.46.43.77
lineage2-game.ru.    0    IN    A    204.46.43.199
lineage2-game.ru.    0    IN    A    204.46.43.234
lineage2-game.ru.    0    IN    A    204.46.43.140
lineage2-game.ru.    0    IN    A    204.46.43.162
lineage2-game.ru.    0    IN    A    204.46.43.138
lineage2-game.ru.    0    IN    A    204.46.43.31
lineage2-game.ru.    0    IN    A    204.46.43.179
lineage2-game.ru.    0    IN    A    204.46.43.103
lineage2-game.ru.    0    IN    A    204.46.43.174
lineage2-game.ru.    0    IN    A    204.46.43.190
lineage2-game.ru.    0    IN    A    204.46.43.73
lineage2-game.ru.    0    IN    A    204.46.43.17
lineage2-game.ru.    0    IN    A    204.46.43.173
lineage2-game.ru.    0    IN    A    204.46.43.168
nukes.directdat.asia.    0    IN    A    212.48.8.140
packetdevil.com.    0    IN    A    244.130.182.27
packetdevil.com.    0    IN    A    25.170.206.147
packetdevil.com.    0    IN    A    238.254.202.197
packetdevil.com.    0    IN    A    163.243.250.207
packetdevil.com.    0    IN    A    186.2.165.171
packetdevil.com.    0    IN    A    186.2.165.173
packetdevil.com.    0    IN    A    140.103.146.38
packetdevil.com.    0    IN    A    236.62.91.88
packetdevil.com.    0    IN    A    241.226.144.78
packetdevil.com.    0    IN    A    186.2.165.168
packetdevil.com.    0    IN    A    186.2.165.182
packetdevil.com.    0    IN    A    140.136.177.108
packetdevil.com.    0    IN    A    211.154.203.126
packetdevil.com.    0    IN    A    186.2.165.247
packetdevil.com.    0    IN    A    160.35.182.159
packetdevil.com.    0    IN    A    186.2.165.238
packetdevil.com.    0    IN    A    186.2.65.26
packetdevil.com.    0    IN    A    186.2.165.241
packetdevil.com.    0    IN    A    228.243.71.63
packetdevil.com.    0    IN    A    36.123.246.102
igate.ampr.org.    0    IN    A    212.48.8.140
ietf.org.    0    IN    MX    0    mail.ietf.org.
jupitoris.jaist.ac.jp.    0    IN    A    150.65.32.90
isc.org.    0    IN    MX    10    mx.pao1.isc.org.
------------------------------cut here-------------------------------


-----------
Don Moore wrote:
> Mine is not either but find it interesting that the devil is 
> attempting to do something and as shown in the trace gets an empty 
> line in return.
>
> Don
>
>
> On Thu, Sep 12, 2013 at 12:33 PM, Chris Maness <chris at chrismaness.com 
> <mailto:chris at chrismaness.com>> wrote:
>
>     I don't believe my JNOS is reachable by the wild internet.  Just
>     44-net.
>
>     Chris
>
>
>     On Thu, Sep 12, 2013 at 9:06 AM, Don Moore <ve3zda at gmail.com
>     <mailto:ve3zda at gmail.com>> wrote:
>
>         I caught this on the trace screen,...multiple lines of them
>         and since I can monitor the core size I see that it has
>         tripled in size this morning...
>
>
>         16:03:41.170975 IP 93.115.85.4.60946 > 192.168.1.150.53: 
>         12990+ [1au] A? a.packetdevil.com <http://a.packetdevil.com>. (58)
>         16:03:41.176553 IP 192.168.1.150.53 > 93.115.85.4.60946: 
>         12990- 20/0/0 A 204.11.53.56,[|domain]
>         16:03:41.276444 IP 93.115.95.216.56606 > 192.168.1.150.53: 
>         65170+ [1au] A? a.packetdevil.com <http://a.packetdevil.com>. (58)
>         16:03:41.282326 IP 192.168.1.150.53 > 93.115.95.216.56606: 
>         65170- 20/0/0 A 204.11.53.56,[|domain
>
>         Don
>
>
>
>
>         On Tue, Sep 10, 2013 at 1:01 PM, Bob Tenty <bobtenty at gmail.com
>         <mailto:bobtenty at gmail.com>> wrote:
>
>             The best hint  is to run a debugger as that may tell you
>             hopefully some more.
>             You can copy the results of it to the list.
>
>             Boudewijn/Bob VE3TOK
>
>
>             On 13-09-10 04:57 AM, Don Moore wrote:
>>             Funny you should say that Chris because my version which
>>             is 2.0h is doing the same..
>>
>>             73, Don - ve3zda
>>
>>
>>             On Mon, Sep 9, 2013 at 8:12 PM, Chris Maness
>>             <chris at chrismaness.com <mailto:chris at chrismaness.com>> wrote:
>>
>>                 I am running JNOS 2.j.2 and it just started crashing
>>                 very regularly every 4 days after a couple of years
>>                 of reliability.  Any hints?
>>
>>                 Chris KQ6UP
>>
>>




More information about the nos-bbs mailing list