[110845] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

DNS Amplification attack?

daemon@ATHENA.MIT.EDU (Wil Schultz)
Tue Jan 20 15:54:42 2009

From: Wil Schultz <wschultz@bsdboy.com>
To: NANOG list <nanog@nanog.org>
Date: Tue, 20 Jan 2009 12:54:32 -0800
Errors-To: nanog-bounces@nanog.org

Anyone else noticing "." requests coming in to your DNS servers?

http://isc.sans.org/diary.html?storyid=5713

I'm seeing them coming from the following addresses in my ns server  
logs.

69.50.142.110
69.50.142.11
76.9.16.171
66.230.128.15
66.230.160.1

-wil


home help back first fref pref prev next nref lref last post