What are these entries in the log file - " query: . IN NS +"?
Mark Andrews
Mark_Andrews at isc.org
Thu Jan 29 03:39:23 UTC 2009
In message <fl82o4hqjudbc65bkfk08ilg3lmk4hqja7 at 4ax.com>, "Tony Toews [MVP]" wri
tes:
> "Tony Toews [MVP]" <ttoews at telusplanet.net> wrote:
>
> >FWIW In the last 28 hours I have the following alleged IP addresses and coun
> t in my
> >log file.
> >
> >Real lookups 1665
> >204.15.80.50 4
> >3.217.28.226 1144
> >4.57.246.146 9541
> >6.9.16.171 577
> >63.217.28.226 1463
> >64.57.246.146 35163
> >65.173.218.96 1
> >67.192.144.0 1488
> >7.192.144.0 12054
> >76.9.16.171 1033
>
> FWIW in the last 26 hours.
> Real Lookups 1673
> 0.86.80.98 14051
So who isn't doing even loose URPF?
0/8 is totally bogus and is a attack directed at you.
> 4.57.246.123 4425
> 4.57.246.146 22719
> 6.9.16.171 419
> 64.57.246.123 4885
> 64.57.246.146 25023
> 67.192.144.0 825
> 7.192.144.0 696
> 70.86.80.98 9317
> 76.9.16.171 295
>
>
> So some have disappeared and new ones added.
>
> Tony
> --
> Tony Toews, Microsoft Access MVP
> Please respond only in the newsgroups so that others can
> read the entire thread of messages.
> Microsoft Access Links, Hints, Tips & Accounting Systems at
> http://www.granite.ab.ca/accsmstr.htm
> Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews at isc.org
More information about the bind-users
mailing list