Anyone else seen a massive upsurge in named version scanning?

[Mark Vevers <mark () ifl net>]

Over the last 3 - 4 days I've seen a massive upsurge in dns named-version
scanning going on - has anyone else noticed this?  This is based on scanning
about half of a /13 worth of address space, so YMMV, but I'm seeing
thousands of alerts per day, sweeping across the address space and am just
wondering if a new DNS exploit is in the offing?

Mark

--
Mark Vevers.    mark () ifl net / mvevers () rm com
Internet Backbone Engineering Team
Internet for Learning, Research Machines Plc
Tel: +44 1235 823380,   Fax: +44 1235 823424



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users