So I have questions...

Discussion in 'Linux VPS/Dedicated - General' started by Dave G, Jan 17, 2014.

  1. Dave G

    Dave G Member

    Good Day All

    In my logwatch I am seeing 100+ entries like the ones below, my questions are:
    Are these outgoing calls from my VPS?
    If so how do I find out from where/what software is making the calls so I can stop them.

    I had added the two IP's to my firewall but I start getting a email's every minute that the IP is being blocked.

    Code:
    error (unexpected RCODE REFUSED) resolving 'savdnn-nny-118.savingspenny.com/A/IN': 75.75.232.7#53: 69 Time(s)
    error (unexpected RCODE REFUSED) resolving 'savdnn-nny-118.savingspenny.com/AAAA/IN': 75.75.232.7#53: 83 Time(s)
    Thanks
     
  2. Dan

    Dan Moderator

    Morning Dave,

    These are domain name resolution errors from your server trying to resolve the domains most likely in emails which don't exist. The emails are of course spam and the server's trying to bounce the email to the reply-to address.
     
  3. Dave G

    Dave G Member

    Dan

    Thanks I'll try blocking the IP's in MailScanner and see what that does for me.
     

Share This Page