[Planetlab-users] DNS Zone Transfer with actinet.cz

[Dragan Milic]

Hello all,

has anyone a slice on our planetlab01.cnds.unibe.ch planetlab node trying to do DNS zone transfer with actinet.cz?

BR,
Dragan


>> From: Actinet support <support at actinet.cz>
>> Date: October 17, 2007 12:49:59 AM GMT+02:00
>> To: btkfr at id.unibe.ch
>> Subject: suspicious activity
>>
>> Dear all,
>>
>> our sensors have detected suspicious activity and DNS_Zone_Transfer
>> attack
>> towards address ranges that we are guarding from IP address which
>> belongs to
>> your address space. See the details below.
>>
>> The attacking address has been blocked and cannot access any of
>> the IP addresses that we are looking after.
>>
>> If you wish that the address is unblocked, please look into the
>> problem and report back what you found. Another attack from the
>> address will result in a permanent block.
>>
>>
>> Best regards.
>>
>>
>> Actinet Support Team
>>
>> == == == == ==
>> details of incident:
>>
>> source      ip  :  130.92.70.251
>> destination ip :  195.234.XXX.XXX
>> time              :  2007-10-17 00:30:51 CEST
>> incident         :  DNS_Zone_Transfer
>> == == == == ==

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3455 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.planet-lab.org/pipermail/users/attachments/20071017/bd750bc4/smime.bin