DoH at authorities

Stephane Bortzmeyer bortzmeyer at nic.fr
Fri Feb 28 13:20:34 UTC 2025


On Fri, Feb 28, 2025 at 11:10:04AM +0000,
 Jared Mauch <jared at puck.nether.net> wrote 
 a message of 29 lines which said:

> It appears to just be recursive query as decoded below.  Instead of
> serving them up a 404 page, I'm likely going to start logging and
> storing these.  I could send back what my local resolver comes up with,
> or just REFUSED.  Wondering what others have done here.

Seen several of them in the last days. All from chinese/singaporean IP
addresses. QNAME is google.com or example.com.



More information about the dns-operations mailing list