Duh moment: when 69.162.119.78 is querying your DNS infrastructure and it appears to be uptimerobot
Posted by jpluimers on 2020/07/28
From the hindsight department [WayBack] Nice when someone in Dallas using 69.162.119.78 is querying your DNS infrastructure for many permutations of domains… https://gist.github.com/jpluimer… – Jeroen Wiert Pluimers – Google+.
Wolfgang Rupprecht gave me some hints on the cause, as the IP address 69.162.119.78 Google Search used to be of a gaming server: [WayBack] TwotailsTikat’s Profile – Member List – Minecraft Forum
After a good night sleep,
# nslookup 69.162.119.78
78.119.162.69.in-addr.arpa name = mail.uptimerobot.com
In retrospect: perfectly normal behaviour for monitoring machine “snip”.
Log by https://github.com/gamelinux/passivedns
–jeroen
https://gist.github.com/jpluimers/71a6988a6ff84ef5fcaaa015c9fb0d38
Leave a Comment