nanog mailing list archives

DNS Amplification attack?

From: Wil Schultz <wschultz () bsdboy com>
Date: Tue, 20 Jan 2009 12:54:32 -0800

Anyone else noticing "." requests coming in to your DNS servers?

http://isc.sans.org/diary.html?storyid=5713

I'm seeing them coming from the following addresses in my ns serverlogs.


69.50.142.110
69.50.142.11
76.9.16.171
66.230.128.15
66.230.160.1

-wil

DNS Amplification attack? Wil Schultz (Jan 20)
- Re: DNS Amplification attack? Raoul Bhatia [IPAX] (Jan 20)
- Re: DNS Amplification attack? David W. Hankins (Jan 20)
  - Re: DNS Amplification attack? Mark Andrews (Jan 20)
  - Re: DNS Amplification attack? David Coulthart (Jan 21)
- Re: DNS Amplification attack? Kameron Gasso (Jan 20)
  - Re: DNS Amplification attack? Christopher Morrow (Jan 20)
    - Re: DNS Amplification attack? Kameron Gasso (Jan 20)
    - Re: DNS Amplification attack? Christopher Morrow (Jan 20)
    - Re: DNS Amplification attack? Chris Adams (Jan 20)
    - Re: DNS Amplification attack? Stuart Henderson (Jan 21)

(Thread continues...)