[Dshield] [Fwd: Heads up: DNS survey traffic from 22.214.171.124/24]
frank at knobbe.us
Sat Jun 25 21:43:33 GMT 2005
On Sat, 2005-06-25 at 05:48 -0400, Chris Brenton wrote:
> -----Forwarded Message-----
> From: Duane Wessels <wessels at packet-pushers.com>
> Beginning monday of next week (2005-06-27) my company (The Measurement
> Factory) plans to begin a survey of DNS authoritative nameservers.
> You may see queries, including VERSION.BIND and zone transfer attempts,
> coming from 126.96.36.199/24.
Oh really? Thank You for announcing 188.8.131.52/24.
But no Thank You for not announcing 184.108.40.206/24. The Measurement
Factory has already been conducting these DNS surveys. We got hits on
the 18th of this month from 220.127.116.11.
Perhaps too many people complained and now they are trying again from a
fresh netblock WITH announcements?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20050625/c489170a/attachment.bin
More information about the list