[71385] in North American Network Operators' Group
149.174.10.0 149.174.99.0 Ddos UDP DNS Denial ?
daemon@ATHENA.MIT.EDU (Pete)
Sun Jun 13 16:42:41 2004
From: "Pete" <crossfire@smsonline.net>
To: "NANOG" <nanog@merit.edu>
Date: Sun, 13 Jun 2004 16:42:03 -0400
Errors-To: owner-nanog-outgoing@merit.edu
149.174.10.0 149.174.99.0 DDOS UDP DNS
Aol your clients are either performing a ddos attack on the following IP
addresses or they are refusing the answers. The NetFlow Output shows the
requests and the answers, what is going on here? Aol admins, if you are
there then, please call us immediately, 301-340-1533
Sincerely,
Peter Schroebel
crossfire@smsonline.net
admin@e-annix.com
Se1/0 149.174.10.7 Fa0/0 66.79.98.30 11 2427 0035 2
Se3/1 149.174.10.8 Fa0/0 66.79.98.30 11 2427 0035 16
Se3/0 149.174.10.7 Fa0/0 66.79.98.40 11 2427 0035 13
Se3/0 149.174.10.9 Fa0/0 66.79.98.30 11 2427 0035 21
Se3/0 149.174.10.8 Fa0/0 66.79.98.30 11 2427 0035 11
Se3/1 149.174.10.7 Fa0/0 66.79.98.40 11 2427 0035 18
Se3/0 149.174.10.9 Fa0/0 66.79.98.30 11 2425 0035 1
Se3/1 149.174.10.4 Fa0/0 66.79.98.40 11 2427 0035 11
Se3/0 149.174.10.8 Fa0/0 66.79.98.30 11 2425 0035 1
Se3/0 149.174.10.4 Fa0/0 66.79.98.40 11 2427 0035 11
Se1/0 149.174.10.9 Fa0/0 66.79.98.30 11 2427 0035 3
Se1/0 149.174.10.7 Fa0/0 66.79.98.40 11 2427 0035 9
Se1/0 149.174.10.8 Fa0/0 66.79.98.30 11 2427 0035 11
Se1/0 149.174.10.4 Fa0/0 66.79.98.40 11 2427 0035 29
Se3/0 149.174.10.7 Fa0/0 66.79.98.30 11 2427 0035 6
Se3/1 149.174.10.7 Fa0/0 66.79.98.30 11 2427 0035 11
Se1/0 149.174.10.9 Fa0/0 66.79.98.40 11 2427 0035 2
Se1/0 149.174.10.8 Fa0/0 66.79.98.40 11 2427 0035 16
Se3/0 149.174.10.9 Fa0/0 66.79.98.40 11 2425 0035 1
Se3/1 149.174.10.8 Fa0/0 66.79.98.40 11 2427 0035 11
Se3/0 149.174.10.9 Fa0/0 66.79.98.40 11 2427 0035 44
Se3/0 149.174.10.8 Fa0/0 66.79.98.40 11 2427 0035 3
Se3/1 149.174.10.9 Fa0/0 66.79.98.40 11 2427 0035 16
Se3/1 149.174.10.4 Fa0/0 66.79.98.30 11 2427 0035 13
Se3/0 149.174.10.4 Fa0/0 66.79.98.30 11 2427 0035 15
Se1/0 149.174.10.4 Fa0/0 66.79.98.30 11 2427 0035 17
Fa0/0 66.79.98.60 Se1/0 149.174.166.25 11 0035 8001 5
Fa0/0 66.79.98.40 Se3/0 149.174.10.4 11 0035 2427 98
Fa0/0 66.79.98.40 Se3/0 149.174.10.8 11 0035 2427 43
Fa0/0 66.79.98.40 Se3/0 149.174.10.9 11 0035 2425 1
Fa0/0 66.79.98.40 Se3/0 149.174.10.7 11 0035 2427 179
Fa0/0 66.79.98.40 Se3/0 149.174.10.9 11 0035 2427 46
Fa0/0 66.79.98.30 Se3/0 149.174.10.9 11 0035 2427 46
Fa0/0 66.79.98.30 Se3/0 149.174.10.9 11 0035 2425 1
Fa0/0 66.79.98.30 Se3/0 149.174.10.8 11 0035 2427 43
Fa0/0 66.79.98.30 Se3/0 149.174.10.7 11 0035 2427 18
Fa0/0 66.79.98.30 Se3/0 149.174.10.4 11 0035 2427 99
Fa0/0 66.79.96.5 Se1/0 149.174.166.25 11 0035 8001 5
Fa0/0 66.79.98.40 Se3/0 149.174.99.54 11 0035 2425 1
Fa0/0 66.79.98.40 Se3/0 149.174.99.54 11 0035 2427 50
Fa0/0 66.79.98.40 Se3/0 149.174.99.48 11 0035 2427 42
Fa0/0 66.79.98.40 Se3/0 149.174.99.44 11 0035 2427 207
Fa0/0 66.79.98.40 Se3/0 149.174.99.43 11 0035 2427 36
Fa0/0 66.79.98.30 Se3/0 149.174.99.48 11 0035 2427 42
Fa0/0 66.79.98.30 Se3/0 149.174.99.44 11 0035 2427 125
Fa0/0 66.79.98.30 Se3/0 149.174.99.43 11 0035 2427 36
Fa0/0 66.79.98.30 Se3/0 149.174.99.54 11 0035 2427 52
Fa0/0 66.79.98.30 Se3/0 149.174.99.54 11 0035 2425 1
Se3/0 149.174.166.25 Fa0/0 66.79.96.5 11 8001 0035 4
Se3/1 149.174.166.25 Fa0/0 66.79.96.5 11 8001 0035 1
Se1/0 149.174.166.25 Fa0/0 66.79.96.5 11 8001 0035 2
Se1/0 149.174.166.25 Fa0/0 66.79.98.60 11 8001 0035 1
Se3/1 149.174.166.25 Fa0/0 66.79.98.60 11 8001 0035 3
Se3/0 149.174.166.25 Fa0/0 66.79.98.60 11 8001 0035 3
Se3/1 149.174.99.54 Fa0/0 66.79.98.40 11 2427 0035 7
Se3/0 149.174.99.54 Fa0/0 66.79.98.40 11 2427 0035 17
Se3/0 149.174.99.54 Fa0/0 66.79.98.40 11 2425 0035 1
Se1/0 149.174.99.54 Fa0/0 66.79.98.30 11 2425 0035 1
Se3/1 149.174.99.48 Fa0/0 66.79.98.40 11 2427 0035 12
Se3/0 149.174.99.48 Fa0/0 66.79.98.40 11 2427 0035 19
Se1/0 149.174.99.54 Fa0/0 66.79.98.30 11 2427 0035 18
Se3/1 149.174.99.54 Fa0/0 66.79.98.30 11 2427 0035 13
Se1/0 149.174.99.48 Fa0/0 66.79.98.40 11 2427 0035 11
Se3/0 149.174.99.54 Fa0/0 66.79.98.30 11 2427 0035 22
Se1/0 149.174.99.54 Fa0/0 66.79.98.40 11 2427 0035 9
Se3/1 149.174.99.44 Fa0/0 66.79.98.30 11 2427 0035 2
Se3/0 149.174.99.44 Fa0/0 66.79.98.30 11 2427 0035 9
Se3/1 149.174.99.43 Fa0/0 66.79.98.30 11 2427 0035 25
Se1/0 149.174.99.44 Fa0/0 66.79.98.30 11 2427 0035 19
Se1/0 149.174.99.43 Fa0/0 66.79.98.30 11 2427 0035 15
Se3/1 149.174.99.48 Fa0/0 66.79.98.30 11 2427 0035 14
Se3/0 149.174.99.48 Fa0/0 66.79.98.30 11 2427 0035 6
Se1/0 149.174.99.48 Fa0/0 66.79.98.30 11 2427 0035 13
Se1/0 149.174.99.43 Fa0/0 66.79.98.40 11 2427 0035 8
Se1/0 149.174.99.44 Fa0/0 66.79.98.40 11 2427 0035 6
Se3/1 149.174.99.44 Fa0/0 66.79.98.40 11 2427 0035 24
Se3/0 149.174.99.44 Fa0/0 66.79.98.40 11 2427 0035 1
Se3/0 149.174.99.43 Fa0/0 66.79.98.40 11 2427 0035 9
Se3/1 149.174.99.43 Fa0/0 66.79.98.40 11 2427 0035 44
Sincerely,
Peter Schroebel
crossfire@smsonline.net
admin@e-annix.com
