ccab2kp ??? zone update with an entry ccab2kp in the zone?

From: Francois VIGNERON (vigneron@remcomp.fr)
Date: 01/06/02


From: Francois VIGNERON <vigneron@remcomp.fr>
Date: Sun, 06 Jan 2002 15:55:23 +0000

Someone tried to add an entry with "ccab2kp in a 192.168.0.12" in one of
my zones. Does anyone knows what the cracker is trying to do?

$TTL 1200 ; 20 minutes
CCAB2KP A 192.168.0.12

I found out in the log file of BIND that someone on the net was trying
to update my zone. So I allowed him(her) to do it. And I got this entry
in my zone after update.

I guess that he/she is trying to allow some software to do something on
my intranet using this domain name.

-- 
F. Vigneron, VF7, Remcomp SARL, RCS Paris B393329511
vigneron@remcomp.com
tel: +33.1.44.79.06.42   fax: +33 1 42.46.39.55  
http://www.remcomp.com/
LIBERNET(tm), service d'acces a l'Internet, Hebergement WEB.



Relevant Pages

  • Re: Reverse DNS Corruption
    ... but the entry says. ... still exist in the Name Servers tab in the zone properties? ... Then go into the zone file ... MVP Microsoft MVP - Directory Services ...
    (microsoft.public.windows.server.dns)
  • Re: TN3270 Abend S0F8 RC04
    ... John, check your SMP/E zone. ... Entry Name: ASASYMBM ... To select an entry from a zone, enter,S,next to the zone. ... My ASASYMBM module, when browsed, says HBB7707, but SMP/E says it's ...
    (bit.listserv.ibm-main)
  • Re: Reverse DNS Corruption
    ... I also tried deleting a new entry and it didn't ... I can run a /Enumrecords on the zone and node so I know I have the ... Then go into the zone file ... MVP Microsoft MVP - Directory Services ...
    (microsoft.public.windows.server.dns)
  • Re: GIM54502E Where DDNAME in message text does not match whats in USERMOD
    ... element entry got updated in the target zone during the first APPLY. ... Rejecting the USERMOD from the global zone does not cleanup the target zone. ...
    (bit.listserv.ibm-main)
  • Re: After server restart Dns zone is disappears
    ... I changed the entry in adsi edit. ... Rebooted the server and the secondary zone was there. ... > If you are very sure about this, you may feel free to rename the dom.org. ... >>> Tom Che ...
    (microsoft.public.win2000.dns)