[dns-operations] High DNS query levels from certain IPs

[Torsten]

Am Tue, 6 Jul 2010 01:16:58 -0700
schrieb Phil Pennock <dnsop+phil at spodhuis.org>:


> Is anyone else seeing high levels of traffic from [12.130.136.11] and
> [80.243.68.34]?
> 
> Source          Query Name            Count      %
> --------------- ----------------- --------- ------
> 12.130.136.11   nlns.globnix.net       1563   21.1
> 12.130.136.11   nlns6.globnix.net       322    4.3
> 12.130.136.11   nlns4.globnix.net       320    4.3
> 80.243.68.34    nlns.globnix.net        246    3.3
> 80.243.68.34    nlns4.globnix.net        68    0.9
> 80.243.68.34    nlns6.globnix.net        55    0.7
> 


We do get queries from those IPs but nothing out of the ordinary. The
highest count so far was 800 queries/hour in early June.


Ciao
Torsten