What are these entries in the log file - " query: . IN NS +"?

Mark Andrews Mark_Andrews at isc.org
Thu Jan 29 03:39:23 UTC 2009


In message <fl82o4hqjudbc65bkfk08ilg3lmk4hqja7 at 4ax.com>, "Tony Toews [MVP]" wri
tes:
> "Tony Toews [MVP]" <ttoews at telusplanet.net> wrote:
> 
> >FWIW In the last 28 hours I have the following alleged IP addresses and coun
> t in my
> >log file.
> >
> >Real lookups	1665
> >204.15.80.50	4
> >3.217.28.226	1144
> >4.57.246.146	9541
> >6.9.16.171	577
> >63.217.28.226	1463
> >64.57.246.146	35163
> >65.173.218.96	1
> >67.192.144.0	1488
> >7.192.144.0	12054
> >76.9.16.171	1033
> 
> FWIW in the last 26 hours.
> Real Lookups	1673
> 0.86.80.98	14051

	So who isn't doing even loose URPF?
	0/8 is totally bogus and is a attack directed at you.

> 4.57.246.123	4425
> 4.57.246.146	22719
> 6.9.16.171	419
> 64.57.246.123	4885
> 64.57.246.146	25023
> 67.192.144.0	825
> 7.192.144.0	696
> 70.86.80.98	9317
> 76.9.16.171	295
> 
> 
> So some have disappeared and new ones added.
> 
> Tony
> -- 
> Tony Toews, Microsoft Access MVP
>    Please respond only in the newsgroups so that others can 
> read the entire thread of messages.
>    Microsoft Access Links, Hints, Tips & Accounting Systems at 
> http://www.granite.ab.ca/accsmstr.htm
>    Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org



More information about the bind-users mailing list