UltraDNS Failure?

Stefan Fouant sfouant at shortestpathfirst.net
Thu Dec 24 01:57:48 UTC 2009


There have been several DNS based DDoS observed throughout the day targetting Ultra as well as a few other companies.  They were first observed earlier in the morning on the East coast.

------Original Message------
From: Richard A Steenbergen
To: Shrdlu
Cc: Nanog
Subject: Re: UltraDNS Failure?
Sent: Dec 23, 2009 8:42 PM

On Wed, Dec 23, 2009 at 05:38:21PM -0800, Shrdlu wrote:
> I'm still seeing the DNS servers at udns down, hard. Amazon's cloud will 
> need a reboot when this is over. Dang, what the heck happened to all 
> that anycast stuff?

We have some DNS providing type customers (not UltraDNS) receiving a few
million packets/sec of UDP/53 DoS traffic, starting at about the same
time as the UltraDNS problems. No clue if it's related, but it certainly
sounds suspicious. :)

-- 
Richard A Steenbergen <ras at e-gerbil.net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)



Sent from my Verizon Wireless BlackBerry


More information about the NANOG mailing list