> Is anyone running a name server see this in there logs? I tried to find a > pattern no luck so far. It seems harmless but why would anyone bother to > do > such a thing?
Dan Kaminski's talk a few years ago was about raising entropy in DNS queries by varying the upper/lower cases of the domain, in an attempt to making it harder to spoof (race) the reply which your DNS server would be giving you. Perhaps this is just the implementation of that.... Simon > > The queries come from all over the world, some from within our own > network. > Our domain is liveblockauctions.com. > > These are some of that ways the requests are coming in. > LIvEBLOckAuCTions.CoM > LIVebLoCKaUCtions.CoM > LiveblOcKaUcTions.COM > LIveBloCKAuctions.Com > livEBLOckaucTions.COM > lIvEblOckaUcTions.cOm > lIVEbLOcKauCTions.coM > livEBlocKaUctions.CoM > lIvebLOckaUCtions.cOm > lIVEbLockauCTions.coM > liveBloCKAUCTions.cOm > liVEBlOCKAUCtions.cOm > > > -- > Easy, fast GUI development. > http://PerlQt.wikidot.com > _______________________________________________ > clug-talk mailing list > clug-talk@clug.ca > http://clug.ca/mailman/listinfo/clug-talk_clug.ca > Mailing List Guidelines (http://clug.ca/ml_guidelines.php) > **Please remove these lines when replying _______________________________________________ clug-talk mailing list clug-talk@clug.ca http://clug.ca/mailman/listinfo/clug-talk_clug.ca Mailing List Guidelines (http://clug.ca/ml_guidelines.php) **Please remove these lines when replying
