[cobalt-security] Lame Server

["Terrance Dwyer" <td@xxxxxxxx>]

Can anyone tell me what's going on here.  Security wise, something's up?
There are more entries where this came from.  This activity has been
increasing over the last week.
Servers a RaQ3i, all patches, PortSentry and ipchains.

Jul 20 04:03:31 www named[420]: Lame server on '76.22.218.210.in-addr.arpa'
(in$
Jul 20 04:03:41 www named[420]: Lame server on '76.22.218.210.in-addr.arpa'
(in$
Jul 20 04:04:23 www named[420]: ns_resp: query(71.82.122.210.in-addr.arpa)
NS p$
Jul 20 04:04:33 www named[420]: Lame server on '71.82.122.210.in-addr.arpa'
(in$
Jul 20 04:04:33 www named[420]: Lame server on '71.82.122.210.in-addr.arpa'
(in$Jul 20 04:05:08 www named[420]: Lame server on
'230.233.135.212.in-addr.arpa' ($
Jul 20 04:07:06 www named[420]: Lame server on '3.1.59.195.in-addr.arpa' (in
'5$
Jul 20 04:08:31 www named[420]: Lame server on '3.4.204.192.in-addr.arpa'
(in '$Jul 20 04:08:31 www named[420]: Lame server on
'3.4.204.192.in-addr.arpa' (in '$
Jul 20 04:09:28 www named[420]: Lame server on '147.51.8.207.in-addr.arpa'
(in $Jul 20 04:09:38 www named[420]: Lame server on
'149.53.174.211.in-addr.arpa' (i$
Jul 20 04:09:38 www named[420]: Lame server on '149.53.174.211.in-addr.arpa'
(i$
Jul 20 04:11:05 www named[420]: Lame server on '32.26.117.216.in-addr.arpa'
(in$
Jul 20 04:12:26 www named[420]: bad referral (14.120.61.in-addr.arpa !<
32h.14.$
Jul 20 04:12:47 www named[420]: bad referral (in-addr.arpa !<
155.219.61.in-add$

Thanks
TD