[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

DNS Amplification attack?

Subject: DNS Amplification attack?
From: wschultz at bsdboy.com (Wil Schultz)
Date: Tue, 20 Jan 2009 12:54:32 -0800

Anyone else noticing "." requests coming in to your DNS servers?

http://isc.sans.org/diary.html?storyid=5713

I'm seeing them coming from the following addresses in my ns server  
logs.

69.50.142.110
69.50.142.11
76.9.16.171
66.230.128.15
66.230.160.1

-wil

Follow-Ups:
- DNS Amplification attack?
  - From: r.bhatia at ipax.at (Raoul Bhatia [IPAX])
- DNS Amplification attack?
  - From: David_Hankins at isc.org (David W. Hankins)
- DNS Amplification attack?
  - From: kgasso-lists at visp.net (Kameron Gasso)

Prev by Date: "IP networks will feel traffic pain in 2009" (C|Net & Cisco)
Next by Date: isprime DOS in progress
Previous by thread: "IP networks will feel traffic pain in 2009" (C|Net & Cisco)
Next by thread: DNS Amplification attack?
Index(es):
- Date
- Thread