Need help in flushing DNS

Andree Toonk andree+nanog at toonk.nl
Thu Jun 20 08:14:27 UTC 2013


Hi,

.-- My secret spy satellite informs me that at 2013-06-20 12:38 AM  Paul
Ferguson wrote:
> I have no knowledge of any DDoS -related activity involving Yelp! and
> Prolexic. Even if there is one, the fact that their DNS records have
> been poisoned has not direct relationship to any current DDoS (there
> isn't one that I am aware of).

That's not what I was trying to say.
The domains like yelp, linkedin, craigslist all incorrectly have (or
had) NS record like:

ns1620.ztomy.com.	172800	IN	A	204.11.56.20
ns2620.ztomy.com.	172800	IN	A	204.11.57.20

Traffic to these IP's is going through Prolexic (see previous mail).
Thought that was interesting...

Andree












More information about the NANOG mailing list