So I have questions...

Dave G

Dave G

Member
Good Day All

In my logwatch I am seeing 100+ entries like the ones below, my questions are:
Are these outgoing calls from my VPS?
If so how do I find out from where/what software is making the calls so I can stop them.

I had added the two IP's to my firewall but I start getting a email's every minute that the IP is being blocked.

Code: 
error (unexpected RCODE REFUSED) resolving 'savdnn-nny-118.savingspenny.com/A/IN': 75.75.232.7#53: 69 Time(s)
error (unexpected RCODE REFUSED) resolving 'savdnn-nny-118.savingspenny.com/AAAA/IN': 75.75.232.7#53: 83 Time(s)

Thanks
 
Morning Dave,

These are domain name resolution errors from your server trying to resolve the domains most likely in emails which don't exist. The emails are of course spam and the server's trying to bounce the email to the reply-to address.
 
You must log in or register to reply here.
Top