Large number of DNS probes in last 24 hours
John Menerick
onewingaengel at gmail.com
Fri May 30 18:54:56 UTC 2008
I have seen this as well on my fringe IP-space networks. Just a
botnet or two running along the range. A cost of doing business :\
John Menerick
http://icehax.us
On May 30, 2008, at 10:11 AM, Lynda wrote:
> Jim Wise wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>> I've seen a surprising number of attempted recursive DNS requests
>> against unpublished non-recursive DNS servers in the last 24 hours
>> or so, many of them obviously probes of some sort (query for "." IN
>> NS, eg).
>
>> Is anyone else seeing this? Is it new? Or did some botnet just
>> reach this corner of the IP space?
>
> Yes, no, and yes. I've seen this sort of thing severe enough that I
> simply took the servers down for a day (yes, really), even
> considering the severe inconvenience that caused.
>
> --
> Die Gedanken sind frei
>
>
More information about the NANOG
mailing list