[dns-operations] Anyone else seeing an idiotic amount of dictionary NS lookups from 184.108.40.206?
jtk at cymru.com
Tue Nov 23 17:23:04 UTC 2010
On Wed, 24 Nov 2010 11:12:21 -0500
Jake Zack <jake.zack at cira.ca> wrote:
> 23-Nov-2010 11:06:47.029 queries: info: client 220.127.116.11#59733:
> query: elsternwick316-320roadglenhuntly.ca IN NS -
I've not seen that source hitting a number of random resolvers and
servers I have insight into. I have seen evidence of it issuing
queries to other large upper level hierarchy authoritative name servers
like .ca. I've also seen evidence that it is performing lots of whois
(TCP port 43) queries as well.
I shot a note off to webnx, the hosting provider, to see if they could
More information about the dns-operations