[165858] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: d6991.com traffic

daemon@ATHENA.MIT.EDU (Jared Mauch)
Mon Sep 23 13:38:22 2013

From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <20130923172513.GB1915@cmadams.net>
Date: Mon, 23 Sep 2013 13:37:44 -0400
To: Chris Adams <cma@cmadams.net>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


On Sep 23, 2013, at 1:25 PM, Chris Adams <cma@cmadams.net> wrote:

> Once upon a time, Chris Hunt <dharmachris@gmail.com> said:
>> That is a problem, but I'm seeing a lot of queries from residential
>> users for what seems to me an obscure name hostied in Asia.  I'm
>> guessing some kind of bot traffic...
>=20
> Any of the affected users have open resolvers (on DSL routers for
> example)?

I've heard estimates (from others that have looked at the =
OpenResovlerProject.org data) around 90% of resolvers are CPE devices =
that respond to queries on the WAN interface.

- Jared=


home help back first fref pref prev next nref lref last post