Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    System log:dnsmasq[58696]: possible DNS-rebind attack detected: www.okvcqqjrbzkb

    Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
    3 Posts 3 Posters 3.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • X
      xtreme698866
      last edited by

      i got this log a while ago….what does this means?does someone trying to sabotage my box?
      dnsmasq[58696]: possible DNS-rebind attack detected: www.okvcqqjrbzkb.co.cc

      1 Reply Last reply Reply Quote 0
      • C
        c0urier
        last edited by

        I have the exact same one:
        Jul 25 01:01:58 dnsmasq[3499]: possible DNS-rebind attack detected: www.okvcqqjrbzkb.co.cc
        Jul 25 01:01:58 dnsmasq[3499]: possible DNS-rebind attack detected: www.okvcqqjrbzkb.co.cc

        2.0-RC3 (amd64)
        built on Fri Jul 15 05:40:33 EDT 2011

        pfsense: 2.1.5-RELEASE, AMD64
        Running on: MB/CPU: ASUS P8H77-I / Core i3-2120T | MEM: 8GB DDR3 | HDD: WD Blue 120GB 2.5" SATA | WAN/LAN: Fujitsu D2735-2 – Intel® chip 82576NS | WLAN: Realtek® 8111F PCIe | Connection: 1000/1000Mbit (Bredband2.com)
        [/U

        1 Reply Last reply Reply Quote 0
        • G
          Gloom
          last edited by

          DNS rebinding is a technique used to fool a router into thinking the client is on the LAN side and can access the web interface (This would allow an attacker to own your system if you were foolish enough to have a default password still set)

          IIRC PFSense 1.x.x was vulnerable to this type of attack as was monowall and most home routers. There is a check in 2 to alert you and it can be triggered by your own servers doing domain forwarding if you've not excluded them.

          Never underestimate the power of human stupidity

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.