mailing list archives
Re: Tracking the DNS amplification attacks (was: isprime DOS inprogress)
From: "Xaver Aerni" <xaerni () pop ch>
Date: Tue, 27 Jan 2009 16:37:35 +0100
Today we have from 184.108.40.206, DNS 67.192.144.x divers of this networkes
----- Original Message -----
From: "Brian Keefer" <chort () smtps net>
To: <nanog () nanog org>
Sent: Tuesday, January 27, 2009 3:42 PM
Subject: Re: Tracking the DNS amplification attacks (was: isprime DOS
and just now it changed to 220.127.116.11. Interestingly, the IP changed
within minutes of me posting to NANOG.
On Jan 27, 2009, at 6:34 AM, Brian Keefer wrote:
There's another new IP: 18.104.22.168 .
Initially (around 2AM Pacific) the query rate was 1 per second, but is
now down significantly.