[Dshield] [Fwd: Heads up: DNS survey traffic from 199.45.255.0/24]

Frank Knobbe frank at knobbe.us
Sat Jun 25 21:43:33 GMT 2005


On Sat, 2005-06-25 at 05:48 -0400, Chris Brenton wrote:
> -----Forwarded Message-----
> From: Duane Wessels <wessels at packet-pushers.com>

> Beginning monday of next week (2005-06-27) my company (The Measurement
> Factory) plans to begin a survey of DNS authoritative nameservers.
> You may see queries, including VERSION.BIND and zone transfer attempts,
> coming from 199.45.255.0/24.

Oh really? Thank You for announcing 199.45.255.0/24.

But no Thank You for not announcing 206.168.0.0/24. The Measurement
Factory has already been conducting these DNS surveys. We got hits on
the 18th of this month from 206.168.0.49.

Perhaps too many people complained and now they are trying again from a
fresh netblock WITH announcements?

Cheers,
Frank

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20050625/c489170a/attachment.bin


More information about the list mailing list