[169219] in North American Network Operators' Group
Re: random dns queries with random sources
daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Tue Feb 18 23:17:54 2014
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: North American Networking and Offtopic Gripes List <nanog@nanog.org>
Date: Wed, 19 Feb 2014 04:07:24 +0000
In-Reply-To: <CAL9jLaYhHmm7JNa6nkyEVPEXDCJV_1VM+24+FGWaONcOWTh1MQ@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Feb 19, 2014, at 10:48 AM, Christopher Morrow <morrowc.lists@gmail.com> =
wrote:
> apologies. both chl.net and chl.com ... which appear to be parts of ttec =
... which is joe.
Premature send - I meant to add 'Or against the authoritative servers for 5=
kkx.com?'
We've been seeing a spate of reflected (not amplified) DNS attacks against =
various authoritative servers in Europe for the past week or so, bounced th=
rough some type of consumer DSL broadband CPE with an open DNS forwarded on=
the WAN interface (don't know the make/model, but it was supplied by the b=
roadband operators to the customers), on some European broadband access net=
works. =20
-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>
Luck is the residue of opportunity and design.
-- John Milton
