[dns-operations] MX record scanning
rickard.dahlstrand at iis.se
Mon May 9 18:44:29 UTC 2011
We are seeing the same thing on the .SE-nameservers. My guess is that they are cleaning their databases as most names result in nxdomain.
9 maj 2011 kl. 18:29 skrev "Carlos Vicente" <cvicente.lists at gmail.com>:
> Dear list,
> In the last week or so I've noticed a significant increase in queries per second on one of our authoritative servers, which happens to be secondary for a number of TLDs. A quick inspection of the traffic patterns seems to indicate an MX record scanning process with no distinguishable origin (I'm guessing a bot net). I was wondering if anyone else was experiencing this and if they had any thoughts they'd want to share.
> I'm attaching a screenshot of the DSC graph that shows the increase in the last few days.
> Carlos Vicente
> University of Oregon
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> dns-jobs mailing list
More information about the dns-operations