[7310] in North American Network Operators' Group
comprehensive DNS scans from dao.andromedia.com
daemon@ATHENA.MIT.EDU (Craig Nordin)
Tue Jan 28 21:53:43 1997
From: Craig Nordin <cnordin@vni.net>
To: nanog@merit.edu
Date: Tue, 28 Jan 1997 21:47:15 -0500 (EST)
Is anyone else seeing DNS ("ls") scan/requests from dao.andromedia.com ?
I'm not sure I want to call it wrong, but it seems pretty cheesy to me
to come over and try to check out all of my DNS systematically.
I have them blocked, but I'm curious as to what they are up to. I asked
once, and they said that they were analyzing the dial-up IP addresses that
were hitting their web pages -- but they are slowly going over hundreds
and hundreds of domain names under our control.
There has to be something interesting in the story behind these scans.
Even if it is only a weird elf :)
--
Craig Nordin -- cnordin@vni.net Virtual Networks http://www.vni.net
