help! (excessive queries for www.brodcast.net, stage.broder.com)

Scott Bertilson scott at nts.umn.edu
Thu Dec 28 20:40:52 UTC 2000


  We've also had a number of machines wildly querying for
"stage.broder.com".  Both of these addresses show up as
belonging to Broderbund Software.  Any ideas as to what
is generating these queries or how to eliminate them would
be most helpful.
				Thanks, Scott

> our nameservers are for the past week getting way overworked..
> when i started looking into this, i found out that our dialup customers
> apparently, unless the ip is spoofed, all of them seem to be sending this
> request
> below.. all for the same place, that does not exist... whats up?
> 
> this is bind 8.2.2-p7 on redhat linux 7.0.
> 
> duane cox
> 
> --------------------------------------------------------
> 
> 28-Dec-2000 14:19:59.930 queries: info:
> XX+/63.146.45.67/www.brodcast.net/A/IN
> 28-Dec-2000 14:20:00.150 queries: info:
> XX+/63.146.45.129/www.brodcast.net/A/IN



More information about the bind-users mailing list