[110845] in North American Network Operators' Group
DNS Amplification attack?
daemon@ATHENA.MIT.EDU (Wil Schultz)
Tue Jan 20 15:54:42 2009
From: Wil Schultz <wschultz@bsdboy.com>
To: NANOG list <nanog@nanog.org>
Date: Tue, 20 Jan 2009 12:54:32 -0800
Errors-To: nanog-bounces@nanog.org
Anyone else noticing "." requests coming in to your DNS servers?
http://isc.sans.org/diary.html?storyid=5713
I'm seeing them coming from the following addresses in my ns server
logs.
69.50.142.110
69.50.142.11
76.9.16.171
66.230.128.15
66.230.160.1
-wil