In message <caeu_gmf1arb8khncxodqrkno1g-yr0ckwzxsomafuyhktqk...@mail.gmail.com> , Mohamed Lrhazi writes: > I've noticed quite a bit of queries to our DNS servers, that look > pretty normal except for the fact that the character case is weird.. > seems to be switching case randomly!
http://courses.isi.jhu.edu/netsec/papers/increased_dns_resistance.pdf > > like: > > nAme1.dOMain.Com > naMe2.DOMain.coM > ... > > and so on.. > > I am wondering if this my DNS server logging issue, or some bug or > attack/scan technique out there. > > Thanks, > Mohamed. > _______________________________________________ > dns-operations mailing list > [email protected] > https://lists.dns-oarc.net/mailman/listinfo/dns-operations > dns-jobs mailing list > https://lists.dns-oarc.net/mailman/listinfo/dns-jobs -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: [email protected] _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
