Mailinglist Archive: opensuse-security (670 mails)

[stephane parenton <sparenton@xxxxxxxxxxx>]

Hi ! 

I'm quite afraid of what I see right now.... can anybody tell me if I'm
hacked or if it's totally normal.....
this sort of activity is completely unusual to us...


thanks everyone for tips and tricks...

stephane
Nov 14 19:09:12.562 queries: info: client 62.161.161.252#45509: query:
surfnet.net IN MX
Nov 14 19:09:12.563 queries: info: client 62.161.161.252#45509: query:
surfnet.net IN A
Nov 14 19:07:32.703 queries: info: client 62.161.161.252#45438: query:
theouterrim.com IN MX
Nov 14 19:07:32.792 queries: info: client 62.161.161.252#45439: query:
bsp.com IN MX
Nov 14 19:07:32.990 queries: info: client 62.161.161.252#45440: query:
theouterrim.com IN A
Nov 14 19:07:33.746 queries: info: client 62.161.161.252#45371: query:
iscape.fi IN A
Nov 14 19:07:33.752 queries: info: client 62.161.161.252#45440: query:
dragon.seed.net.tw IN MX
Nov 14 19:07:33.752 queries: info: client 62.161.161.252#45440: query:
dragon.seed.net.tw IN A
Nov 14 19:07:33.977 queries: info: client 62.161.161.252#45375: query:
nfshq.com IN MX
Nov 14 19:07:34.676 queries: info: client 62.161.161.252#45440: query:
irv-ca7-25.ix.netcom.com IN MX
Nov 14 19:07:34.885 queries: info: client 62.161.161.252#45440: query:
irv-ca7-25.ix.netcom.com IN A
Nov 14 19:07:36.878 queries: info: client 62.161.161.252#45382: query:
sequent.com IN MX
Nov 14 19:07:36.999 queries: info: client 62.161.161.252#45442: query:
nlink.com IN MX
Nov 14 19:07:37.573 queries: info: client 62.161.161.252#45443: query:
aster.com.pk IN MX
Nov 14 19:07:37.727 queries: info: client 62.161.161.252#45444: query:
88.202.128.217.in-addr.arpa IN PTR
Nov 14 19:07:38.364 queries: info: client 62.161.161.252#45445: query:
1.162.73.209.in-addr.arpa IN PTR
Nov 14 19:07:39.482 queries: info: client 62.161.161.252#45445: query:
go.com IN MX
Nov 14 19:07:39.768 queries: info: client 62.161.161.252#45445: query:
webmailmta.go.com IN A
Nov 14 19:07:40.415 queries: info: client 62.161.161.252#45446: query:
yourwap.com IN MX
Nov 14 19:07:40.618 queries: info: client 62.161.161.252#45432: query:
webcafe.net IN MX
Nov 14 19:07:40.680 queries: info: client 62.161.161.252#45446: query:
go.com IN MX
Nov 14 19:07:41.299 queries: info: client 62.161.161.252#45446: query:
webtv.net IN MX
Nov 14 19:07:41.507 queries: info: client 62.161.161.252#45446: query:
mailsorter-102.bryant.webtv.net IN A
Nov 14 19:07:41.508 queries: info: client 62.161.161.252#45446: query:
mailsorter-101.bryant.webtv.net IN A
Nov 14 19:07:42.098 queries: info: client 62.161.161.252#45366: query:
kalitta.com IN MX
Nov 14 19:07:42.144 queries: info: client 62.161.161.252#45446: query:
neptis.dsl.tutics.tut.ac IN MX
Nov 14 19:07:42.144 queries: info: client 62.161.161.252#45446: query:
neptis.dsl.tutics.tut.ac IN A
Nov 14 19:07:42.145 queries: info: client 62.161.161.252#45446: query:
webtv.net IN MX
Nov 14 19:07:42.639 queries: info: client 62.161.161.252#45447: query:
nlink.com IN MX
Nov 14 19:07:43.358 queries: info: client 62.161.161.252#45448: query:
nfshq.com IN MX
Nov 14 19:07:43.456 queries: info: client 62.161.161.252#45448: query:
usa.net IN MX
Nov 14 19:07:43.758 queries: info: client 62.161.161.252#45371: query:
iscape.fi IN A
Nov 14 19:07:43.839 queries: info: client 62.161.161.252#45449: query:
aster.com.pk IN MX
Nov 14 19:07:44.030 queries: info: client 62.161.161.252#45451: query:
mxpool01.netaddress.usa.net IN A
Nov 14 19:07:44.057 queries: info: client 62.161.161.252#45451: query:
nlink.com IN MX
Nov 14 19:07:44.759 queries: info: client 62.161.161.252#45452: query:
etheron.com IN MX
Nov 14 19:07:44.910 queries: info: client 62.161.161.252#45453: query:
75.103.82.194.in-addr.arpa IN PTR
Nov 14 19:07:44.951 queries: info: client 62.161.161.252#45454: query:
jupiter.cs.up.ac.za IN MX
Nov 14 19:07:44.952 queries: info: client 62.161.161.252#45454: query:
usa.net IN MX
Nov 14 19:07:44.965 queries: info: client 62.161.161.252#45454: query:
253.161.161.62.in-addr.arpa IN PTR
Nov 14 19:07:45.124 queries: info: client 62.161.161.252#45454: query:
nlink.com IN MX
Nov 14 19:07:45.476 queries: info: client 62.161.161.252#45455: query:
74.124.203.213.in-addr.arpa IN PTR
Nov 14 19:07:45.482 queries: info: client 62.161.161.252#45455: query:
253.161.161.62.in-addr.arpa IN PTR
Nov 14 19:07:46.015 queries: info: client 62.161.161.252#45458: query:
success.net IN MX
Nov 14 19:07:46.570 queries: info: client 62.161.161.252#45458: query:
mail.success.net IN A
Nov 14 19:07:46.576 queries: info: client 62.161.161.252#45458: query:
latino.com IN MX
Nov 14 19:07:46.751 queries: info: client 62.161.161.252#45459: query:
191.213.48.193.in-addr.arpa IN PTR
Nov 14 19:07:46.899 queries: info: client 62.161.161.252#45382: query:
sequent.com IN MX
Nov 14 19:07:47.095 queries: info: client 62.161.161.252#45460: query:
latinosmtp1.prontomail.com IN A