[External] strange queries incrementing letter by letter

Mark Andrews marka at isc.org
Fri May 7 19:11:30 UTC 2021


Some piece of software trying to speed up resolution by resolving names as you type.

-- 
Mark Andrews

> On 8 May 2021, at 04:21, Kevin A. McGrail <kmcgrail at pccc.com> wrote:
> 
> 
> Weird.
> 
> Thoughts are:
> 
> Bad software?  What we call ratware.  
> 
> UDP/TCP Firewall issues?
> 
> Regards,
> 
> KAM
> 
>> On 5/7/2021 1:32 PM, Kevin Kretz wrote:
>> I see occasional series of queries like this, from within my network and among disparate types of host (linux, windows):
>> 
>> If there's a host called 
>> 
>> hostname.mynet.com
>> 
>> I'll see a sequence of queries like
>> 
>> hostname.m
>> hostname.my
>> hostname.myn
>> hostname.myne
>> hostname.mynet
>> hostname.mynet.c
>> hostname.mynet.co
>> hostname.mynet.com
>> 
>> Can anyone tell me what this is?
>> 
>> 
>> thanks
>> 
>> Kevin
>> 
>> 
>> 
>> _______________________________________________
>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>> 
>> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
>> 
>> 
>> bind-users mailing list
>> bind-users at lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
> -- 
> <PCCC-Logo-Vertical-Blue-75x75.png>
> 
> <raptor-logo-vertical-blue-75x75.png>
> 
>  
> 
> Kevin A. McGrail
> CEO Emeritus
> Peregrine Computer Consultants Corporation
>  
> <phone_sig_icon_orange.png>
> +1.703.798.0171	
> <email_sig_icon_orange.png>
> kmcgrail at pccc.com
> <web_sig_icon_orange.png>
>  https://pccc.com/	
> <web_sig_icon_orange.png>
> https://raptoremailsecurity.com
> <location_sig_icon_orange.png>
> 10311 Cascade Lane, Fairfax, Virginia 22032-2357 USA
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20210508/0cfb8acc/attachment.htm>


More information about the bind-users mailing list