[104934] in North American Network Operators' Group
Re: Large number of DNS probes in last 24 hours
daemon@ATHENA.MIT.EDU (Michael Still)
Fri May 30 22:58:54 2008
Date: Fri, 30 May 2008 20:00:49 -0700
From: Michael Still <mikal@stillhq.com>
To: Jim Wise <jwise@draga.com>
In-Reply-To: <alpine.NEB.1.10.0805301303240.1704@himring.draga.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org
Jim Wise wrote:
> I've seen a surprising number of attempted recursive DNS requests
> against unpublished non-recursive DNS servers in the last 24 hours or
> so, many of them obviously probes of some sort (query for "." IN NS,
> eg).
>
> Is anyone else seeing this? Is it new? Or did some botnet just reach
> this corner of the IP space?
I have seen PlanetLab experiments doing this. What are the originating
IP addresses?
Mikal
