[dns-operations] Questions about 13-character pseudo-random query storms

[Shane Kerr]

On 2018-10-12 00:33, Luis E. Muñoz wrote:
> 
> 
> On 9 Oct 2018, at 22:58, Giovane Moura wrote:
> 
>>   - people trying to enumerate your zones (we've seen this in .nl before)
> 
> Why go to such great lengths to enumerate the zone, when they can 
> download the zones from the CZDS?

Possibly ignorance?

In my past life working at an RIR we saw people scraping the contents of 
the database through WHOIS, even when it was available to download via 
FTP. It was a mystery to me, but my guess then was people just didn't know.

Cheers,

--
Shane