Mmm what is this?

today I receive an email with this message from the WHM.
ctive System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
May 23 07:05:17 jorge portsentry[952]: attackalert: Connect from host: 195.246.158.102/195.246.158.102 to TCP port: 111
May 23 07:05:17 jorge portsentry[952]: attackalert: Host 195.246.158.102 has been blocked via wrappers with string: "ALL: 195.246.158.102"
May 23 07:05:17 jorge portsentry[952]: attackalert: Host 195.246.158.102 has been blocked via dropped route using command: "/sbin/route add -host 195.246.158.102 gw 127.0.0.1"
May 23 07:05:17 jorge portsentry[952]: attackalert: Connect from host: 195.246.158.102/195.246.158.102 to TCP port: 111
May 23 07:05:17 jorge portsentry[952]: attackalert: Host: 195.246.158.102 is already blocked. Ignoring
May 23 14:17:03 jorge portsentry[952]: attackalert: Connect from host: 212.29.115.155/212.29.115.155 to TCP port: 1080
May 23 14:17:03 jorge portsentry[952]: attackalert: Host 212.29.115.155 has been blocked via wrappers with string: "ALL: 212.29.115.155"

Security Violations
=-=-=-=-=-=-=-=-=-=
May 23 04:37:43 jorge named[1160]: bad referral (net !< yahoo.com) from [216.32.74.10].53
May 23 04:37:43 jorge named[1160]: bad referral (net !< yahoo.com) from [204.71.200.33].53
May 23 07:05:17 jorge portsentry[952]: attackalert: Connect from host: 195.246.158.102/195.246.158.102 to TCP port: 111
May 23 07:05:17 jorge portsentry[952]: attackalert: Host 195.246.158.102 has been blocked via wrappers with string: "ALL: 195.246.158.102"
May 23 07:05:17 jorge portsentry[952]: attackalert: Host 195.246.158.102 has been blocked via dropped route using command: "/sbin/route add -host 195.246.158.102 gw 127.0.0.1"
May 23 18:03:20 jorge named[13099]: bad referral (net !< yahoo.com) from [204.71.200.33].53
May 23 18:03:20 jorge named[13099]: bad referral (net !< yahoo.com) from [216.32.74.10].53
May 23 19:13:23 jorge named[13099]: bad referral (net !< yahoo.com) from [204.71.200.33].53
May 23 19:13:23 jorge named[13099]: bad referral (net !< yahoo.com) from [216.32.74.10].53
May 23 21:28:28 jorge named[13099]: bad referral (net !< yahoo.com) from [216.32.74.10].53
May 23 21:28:28 jorge named[13099]: bad referral (net !< yahoo.com) from [204.71.200.33].53
May 24 01:22:00 jorge named[13099]: bad referral (122.74.216.in-addr.arpa !< 2.122.74.216.in-addr.arpa) from [216.74.122.26].53
May 24 01:22:00 jorge named[13099]: bad referral (122.74.216.in-addr.arpa !< 2.122.74.216.in-addr.arpa) from [216.74.122.26].53

Can anybody explain me what is happening?
My server was under a hack attack?
Thanks in advance and please excuse me for a so long message

 

 

 

 

Top