North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Large number of DNS probes in last 24 hours

  • From: Lynda
  • Date: Fri May 30 13:10:13 2008
Jim Wise wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I've seen a surprising number of attempted recursive DNS requests against unpublished non-recursive DNS servers in the last 24 hours or so, many of them obviously probes of some sort (query for "." IN NS, eg).

Is anyone else seeing this? Is it new? Or did some botnet just reach this corner of the IP space?

Yes, no, and yes. I've seen this sort of thing severe enough that I simply took the servers down for a day (yes, really), even considering the severe inconvenience that caused.

--
Die Gedanken sind frei