[Dshield] [Fwd: Heads up: DNS survey traffic from 188.8.131.52/24]
frank at knobbe.us
Sat Jun 25 21:43:33 GMT 2005
On Sat, 2005-06-25 at 05:48 -0400, Chris Brenton wrote:
> -----Forwarded Message-----
> From: Duane Wessels <wessels at packet-pushers.com>
> Beginning monday of next week (2005-06-27) my company (The Measurement
> Factory) plans to begin a survey of DNS authoritative nameservers.
> You may see queries, including VERSION.BIND and zone transfer attempts,
> coming from 184.108.40.206/24.
Oh really? Thank You for announcing 220.127.116.11/24.
But no Thank You for not announcing 18.104.22.168/24. The Measurement
Factory has already been conducting these DNS surveys. We got hits on
the 18th of this month from 22.214.171.124.
Perhaps too many people complained and now they are trying again from a
fresh netblock WITH announcements?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20050625/c489170a/attachment.bin
More information about the list