[dns-operations] MX record scanning

[Rickard Dahlstrand]

Hi,

We are seeing the same thing on the .SE-nameservers. My guess is that they are cleaning their databases as most names result in nxdomain.

Rickard.

9 maj 2011 kl. 18:29 skrev "Carlos Vicente" <cvicente.lists at gmail.com>:

> Dear list,
> 
> In the last week or so I've noticed a significant increase in queries per second on one of our authoritative servers, which happens to be secondary for a number of TLDs. A quick inspection of the traffic patterns seems to indicate an MX record scanning process with no distinguishable origin (I'm guessing a bot net). I was wondering if anyone else was experiencing this and if they had any thoughts they'd want to share.
> 
> I'm attaching a screenshot of the DSC graph that shows the increase in the last few days.
> 
> Regards,
> 
> Carlos Vicente
> University of Oregon
> 
> <uoregn-dsc-qps-graph.png>
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs