[dns-wg] PTR-Queries asking for type A or AAAA

> On Jan 9, 2016, at 6:56 AM, Bjørn Mork <bjorn at mork.no> wrote:
> 
> Randy Bush <randy at psg.com> writes:
> 
>>> today I noticed, that my DNS servers are getting a noticable amount of
>>> DNS queries for my IPv4 reverse zone, asking for type A or AAAA.
>> 
>> how strange, as a reverse zone should pretty much be all PTRs
> 
> Not always: https://cr.yp.to/djbdns/walldns.html
> 
> Maybe someone is testing for walldns presence?  Not that it is a
> particularily good test, but you never know what the kids will do...
> Nope, that cannot explain AAAA requests so there is probably something
> else going on.

My guess (with no data) would be a spam run using harvested domain names that didn't weed out silly names (why bother if you're a spammer?).

Regards,
-drc

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 496 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.ripe.net/ripe/mail/archives/dns-wg/attachments/20160109/ee3ebf92/attachment.sig>