[nsp-sec] Suspicious DNS Activity

White, Gerard Gerard.White at aliant.ca
Wed Jul 30 12:29:32 EDT 2008


Greetings.

The following source is doing a continuious, repetitive Type 255
(Request all records) request
to the tune of 10-30 QPS on some of our patched servers:

AS      | IP               | AS Name
25535   | 194.85.88.199    | ASN-RUCENTER-HOSTING Hosting Traffic
exchange

GW
855 - Bell Aliant



More information about the nsp-security mailing list