I'm having thousands of queries a domain isc.org and this increases my cpu percentage to 100%. That may be happening and how I can control this? is an attack? attachment of the log I made an update to version 9.9.2-P2 as recommended but still conti...

[Denis Laventure]

> These seems like some attack going on, after reading the mails i also check my recursive server and found a lot of these in my logs:
> my server is not an open recursive server its only open to my clients and these are not even from my country.

Same here, my DNS are open to my clients only and are not open resolver. Good to see that I'm not the only one with that problem. 

Finally, I got this list of IPs blocked on my firewall and I don't have issue anymore for now :

object-group network N_DENY_DNS_OUTSIDE
network-object host 101.226.167.13
network-object host 109.0.64.16
network-object host 109.0.64.17
network-object host 109.0.65.16
network-object host 109.0.65.17
network-object host 111.1.44.35
network-object host 111.1.44.36
network-object host 111.1.44.37
network-object host 111.1.44.38
network-object host 112.195.31.70
network-object host 113.18.252.17
network-object host 113.187.17.178
network-object host 113.57.142.156
network-object host 117.21.187.19
network-object host 117.21.187.20
network-object host 117.21.187.21
network-object host 117.21.187.22
network-object host 120.128.3.249
network-object host 120.128.3.250
network-object host 120.128.3.251
network-object host 120.128.3.252
network-object host 120.128.6.42
network-object host 120.192.83.233
network-object host 122.143.14.49
network-object host 122.143.14.52
network-object host 122.48.244.142
network-object host 122.70.131.153
network-object host 122.70.131.154
network-object host 122.70.131.155
network-object host 122.70.131.156
network-object host 122.70.131.157
network-object host 122.70.131.158
network-object host 122.70.131.159
network-object host 122.70.131.160
network-object host 123.125.67.189
network-object host 124.205.11.218
network-object host 125.89.73.39
network-object host 125.89.73.40
network-object host 125.89.73.41
network-object host 125.89.73.42
network-object host 140.207.197.67
network-object host 14.18.17.29
network-object host 142.4.200.12
network-object host 142.4.200.13
network-object host 173.242.116.155
network-object host 174.93.193.124
network-object host 174.94.53.156
network-object host 175.25.243.15
network-object host 182.118.40.31
network-object host 183.60.211.65
network-object host 184.161.199.73
network-object host 190.120.202.203
network-object host 206.123.31.9
network-object host 217.156.250.10
network-object host 217.156.250.150
network-object host 217.156.250.152
network-object host 217.156.250.153
network-object host 217.156.250.154
network-object host 217.156.250.155
network-object host 217.156.250.157
network-object host 218.206.207.75
network-object host 220.181.126.4
network-object host 220.181.126.42
network-object host 220.181.156.90
network-object host 220.181.156.91
network-object host 221.130.199.65
network-object host 221.130.199.66
network-object host 221.130.199.67
network-object host 221.130.199.68
network-object host 221.204.197.13
network-object host 24.226.178.180
network-object host 31.222.72.4
network-object host 49.128.160.50
network-object host 63.251.28.10
network-object host 63.251.28.215
network-object host 70.49.212.28
network-object host 72.14.165.194
network-object host 74.131.77.13
network-object host 74.217.66.10
network-object host 74.217.66.11
network-object host 75.98.70.11
network-object host 75.98.70.210
network-object host 75.98.70.215
network-object host 75.98.70.216
network-object host 94.102.51.196

Denis 

my server is not an open recursive server its only open to my clients and these are not even from my country.

Kebba

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users