[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Tracking the DNS amplification attacks (was: isprime DOS in progress)

Subject: Tracking the DNS amplification attacks (was: isprime DOS in progress)
From: chort at smtps.net (Brian Keefer)
Date: Tue, 27 Jan 2009 06:42:03 -0800
In-reply-to: <[email protected]>
References: <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <C035DD0A88EFF241A24578B7B8D5B505013F4538@intranet.mail.hostingshop.com.au> <[email protected]> <[email protected]> <[email protected]> <[email protected]>

and just now it changed to 64.57.246.146.  Interestingly, the IP  
changed within minutes of me posting to NANOG.

--
bk

On Jan 27, 2009, at 6:34 AM, Brian Keefer wrote:

> There's another new IP:  67.192.144.0 .
>
> Initially (around 2AM Pacific) the query rate was 1 per second, but  
> is now down significantly.
>
>
> --
> bk
>
>
>
>

Follow-Ups:
- Tracking the DNS amplification attacks (was: isprime DOS inprogress)
  - From: xaerni at pop.ch (Xaver Aerni)

References:
- Any ATT DNS admins out there?
  - From: mike.lyon at gmail.com (Mike Lyon)
- isprime DOS in progress
  - From: nanog at email.fries.net (Todd T. Fries)
- isprime DOS in progress
  - From: graeme at graemef.net (Graeme Fowler)
- isprime DOS in progress
  - From: bjorn at mork.no (Bjørn Mork)
- isprime DOS in progress
  - From: pr at isprime.com (Phil Rosenthal)
- isprime DOS in progress
  - From: stevel at dedicatedservers.net.au (Steven Lisson)
- isprime DOS in progress
  - From: luke at sheldrick.co.uk (Luke Sheldrick)
- isprime DOS in progress
  - From: chort at smtps.net (Brian Keefer)
- Tracking the DNS amplification attacks (was: isprime DOS in progress)
  - From: chort at smtps.net (Brian Keefer)
- Tracking the DNS amplification attacks (was: isprime DOS in progress)
  - From: chort at smtps.net (Brian Keefer)

Prev by Date: Tracking the DNS amplification attacks (was: isprime DOS in progress)
Next by Date: DNS DDoS - New Hosts
Previous by thread: Tracking the DNS amplification attacks (was: isprime DOS in progress)
Next by thread: Tracking the DNS amplification attacks (was: isprime DOS inprogress)
Index(es):
- Date
- Thread