mailing list archives
Re: Tightened DNS security question re: DNS amplification attacks.
From: fredrik danerklint <fredan-nanog () fredan se>
Date: Wed, 28 Jan 2009 13:16:01 +0100
At 12:07:16 local time here in sweden, I saw a new address 184.108.40.206.
At 12:09:36 another new address 220.127.116.11
At 12:20:10 the address 18.104.22.168 started to ask for funny domain name like:
"pjphcdaaaafwu0000dgaaabaaacboinf". This ended at 12:55:01 when it was back to
just ask for the .NS records again.