[nsp-sec] What's up with *.footprint.net domains???

[Patrick W. Gilmore]

On Mar 1, 2008, at 5:07 PM, White, Gerard wrote:

> Thanks for the insight... The problem we see here is we're getting
> Queries towards our machinery for appended domains like:
>
> www.msnbc.msn.com.c.footprint.net
> global.msads.net.c.footprint.net
>
> On a rather massive scale...
>
> Weird...  Only appears to be Microsoft based domains that get this  
> type
> of treatment.

Microsoft was (may still be) a customer of DI.  Those domain names do  
not seem wholly unreasonable for a customer of DI.  My guess is that  
someone at Level 3 / Digital Island has type-o'ed your NS IP addy for  
a DI authority.

My suggestion would be to contact DI/L3 directly and ask.  I'm pretty  
sure there are L3 people on this list.

Sorry I can't be of more help.

-- 
TTFN,
patrick



> -----Original Message-----
> From: Patrick W. Gilmore [mailto:patrick at akamai.com]
> Sent: Saturday, March 01, 2008 6:19 PM
> To: White, Gerard
> Cc: Patrick W. Gilmore; nsp-security at puck.nether.net
> Subject: Re: [nsp-sec] What's up with *.footprint.net domains???
>
> On Mar 1, 2008, at 3:31 PM, White, Gerard wrote:
>
>> Anybody have any background info about why we would get bombarded  
>> with
>> queries for various *.footprint.net DNS RRs from our customer base?
>
> Footprint.net is the domain for Digital Island, the CDN that Level3
> now owns.
>
> Perhaps you at one time hosted boxes for Digital Island?  (It does not
> have to have anything to do with L3, since DI has been owned by
> several companies over time, including themselves, C&W, and Savvis.)
>
> -- 
> TTFN,
> patrick
>
>