DNS Exploit Attempts??

Paul Vixie vixie at isc.org
Thu Jul 31 16:36:21 UTC 2008


Bruce Esquibel <bje at e4500.ripco.com> writes:

> client 149.20.56.10#10053: query:
> not-an-attack.dan-kaminsky.browse-deluvian.doxpara.com IN ANY +
>
> The ip address goes back to isc.org so just wondering if there is a spider
> of sorts running to determine whose name server is running what version or
> something.

yes, isc is supporting several dns spiders who are measuring the population
of patched vs. unpatched, and measuring for poison injections.
-- 
Paul Vixie


More information about the bind-users mailing list