Need help in flushing DNS
Andree Toonk
andree+nanog at toonk.nl
Thu Jun 20 08:14:27 UTC 2013
Hi,
.-- My secret spy satellite informs me that at 2013-06-20 12:38 AM Paul
Ferguson wrote:
> I have no knowledge of any DDoS -related activity involving Yelp! and
> Prolexic. Even if there is one, the fact that their DNS records have
> been poisoned has not direct relationship to any current DDoS (there
> isn't one that I am aware of).
That's not what I was trying to say.
The domains like yelp, linkedin, craigslist all incorrectly have (or
had) NS record like:
ns1620.ztomy.com. 172800 IN A 204.11.56.20
ns2620.ztomy.com. 172800 IN A 204.11.57.20
Traffic to these IP's is going through Prolexic (see previous mail).
Thought that was interesting...
Andree
More information about the NANOG
mailing list