[111026] in North American Network Operators' Group
Re: Tracking the DNS amplification attacks (was: isprime DOS
daemon@ATHENA.MIT.EDU (Xaver Aerni)
Tue Jan 27 10:37:57 2009
From: "Xaver Aerni" <xaerni@pop.ch>
To: <nanog@nanog.org>
Date: Tue, 27 Jan 2009 16:37:35 +0100
Errors-To: nanog-bounces@nanog.org
Today we have from 208.69.36.12, DNS 67.192.144.x divers of this networkes
attakes
----- Original Message -----
From: "Brian Keefer" <chort@smtps.net>
To: <nanog@nanog.org>
Sent: Tuesday, January 27, 2009 3:42 PM
Subject: Re: Tracking the DNS amplification attacks (was: isprime DOS
inprogress)
> and just now it changed to 64.57.246.146. Interestingly, the IP changed
> within minutes of me posting to NANOG.
>
> --
> bk
>
>
>
> On Jan 27, 2009, at 6:34 AM, Brian Keefer wrote:
>
>> There's another new IP: 67.192.144.0 .
>>
>> Initially (around 2AM Pacific) the query rate was 1 per second, but is
>> now down significantly.
>>
>>
>> --
>> bk
>>
>>
>>
>>
>
>
>
