Hi All,
This is a bit off topic for this list, but I know a few of you run your own name servers, so I thought I'd ask.
Over the past couple of days, we've noticed some very strange DNS traffic patterns on our servers. Tons of forward lookups from the same few hosts on a couple of domains over and over, and the same type of thing on a few IP's. Tons of reverse lookups for the same few IP's from 3 or 4 hosts over and over. And when I say "Tons" and "over and over", I mean thousands of requests in a matter of a few minutes.
 
Anyone else seeing any weirdness like this going on? We had heard rumor of a bunch of RDOS attacks being launched in the past few days, and I wondered if this could be some sort of artifact created by the attacks. I had heard that a few major BGP routers were involved. I don't know as much about this as I probably should, so if that line of thinking is totally off base, forgive me, and chalk it up to ignorance.
 
Anyway, just wondering if anyone else out there had noticed any strange traffic patterns like this.
Feel free to reply off list if you like so we don't bore the other "non-isp" type resellers listening in.
 
Thanks,
-Mark
 
Mark Petersen    [EMAIL PROTECTED]
Planet Nic    http://www.planet-nic.com

Reply via email to