Large number of DNS probes in last 24 hours

Fri May 30 17:11:43 UTC 2008

Jim Wise wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> I've seen a surprising number of attempted recursive DNS requests 
> against unpublished non-recursive DNS servers in the last 24 hours or 
> so, many of them obviously probes of some sort (query for "." IN NS, 
> eg).

> Is anyone else seeing this?  Is it new?  Or did some botnet just reach 
> this corner of the IP space?

Yes, no, and yes. I've seen this sort of thing severe enough that I 
simply took the servers down for a day (yes, really), even considering 
the severe inconvenience that caused.

-- 
Die Gedanken sind frei