nanog mailing list archives

Re: Large number of DNS probes in last 24 hours


From: Michael Still <mikal () stillhq com>
Date: Fri, 30 May 2008 20:00:49 -0700

Jim Wise wrote:
I've seen a surprising number of attempted recursive DNS requests 
against unpublished non-recursive DNS servers in the last 24 hours or 
so, many of them obviously probes of some sort (query for "." IN NS, 
eg).

Is anyone else seeing this?  Is it new?  Or did some botnet just reach 
this corner of the IP space?

I have seen PlanetLab experiments doing this. What are the originating
IP addresses?

Mikal


Current thread: