Large number of DNS probes in last 24 hours
shrdlu at deaddrop.org
Fri May 30 12:11:43 CDT 2008
Jim Wise wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> I've seen a surprising number of attempted recursive DNS requests
> against unpublished non-recursive DNS servers in the last 24 hours or
> so, many of them obviously probes of some sort (query for "." IN NS,
> Is anyone else seeing this? Is it new? Or did some botnet just reach
> this corner of the IP space?
Yes, no, and yes. I've seen this sort of thing severe enough that I
simply took the servers down for a day (yes, really), even considering
the severe inconvenience that caused.
Die Gedanken sind frei
More information about the NANOG