Hi,

Date: Sat, 15 Mar 2025 12:12:17 +0100
From: Hans Mayer <[email protected]>
To: [email protected]
Subject: random queries
Message-ID: <[email protected]>
Content-Type: text/plain; charset="utf-8"; Format="flowed"


Dear All,

I saw in the past increased queries for random names. For example from
this IP 60.26.63.253
It comes in about half minute intervals and doesn't make sense for me at
all. I find it over weeks in the logs.
Any ideas for what this should be useful ?

I don’t know either, but I’ve noticed the same behavior from several resolvers I use. I’ve received a large number of queries from two IPs (60.26.63.253, 60.26.67.97) within the range 60.24.0.0/14, similar to this one:
https://paste.debian.net/1363290/

Since March 1, 2025, there have been queries for a total of 14,326 random domains. I can provide more details on the queries if needed.


--
Willy Manga
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Reply via email to