[dns-operations] Queries for isc.org/ANY/IN

Sebastian Wiesinger dns-operations at ml.karotte.org
Sun Jan 8 23:45:56 UTC 2012


Hello,

I'm noticing a spike in queries for isc.org/ANY/IN on my DNS server.
These are refused but I wonder what is up? I read that there was a
(attempted) DDoS with these kind of queries in the past, is ist
starting up again?

These queries suddenly started on January 2nd, you can see it here:

http://www.karotte.org/pics/isc-queries.png

There are the Top 10 clients for this query in the last 24 hours:

   2476 69.4.233.53
   2120 76.10.210.231
   1301 212.7.194.14
    926 176.31.235.155
    534 68.68.27.29
    457 174.127.73.147
    232 78.159.111.189
    143 174.127.88.134
     95 69.4.230.111
     79 46.105.9.242

Regards

Sebastian

-- 
GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A  9D82 58A2 D94A 93A0 B9CE)
'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE.
            -- Terry Pratchett, The Fifth Elephant



More information about the dns-operations mailing list