Tracking the DNS amplification attacks (was: isprime DOS inprogress)

Tue Jan 27 15:37:35 UTC 2009

Today we have from 208.69.36.12, DNS 67.192.144.x   divers of this networkes
attakes

----- Original Message ----- 
From: "Brian Keefer" <chort at smtps.net>
To: <nanog at nanog.org>
Sent: Tuesday, January 27, 2009 3:42 PM
Subject: Re: Tracking the DNS amplification attacks (was: isprime DOS 
inprogress)


> and just now it changed to 64.57.246.146.  Interestingly, the IP  changed 
> within minutes of me posting to NANOG.
>
> --
> bk
>
>
>
> On Jan 27, 2009, at 6:34 AM, Brian Keefer wrote:
>
>> There's another new IP:  67.192.144.0 .
>>
>> Initially (around 2AM Pacific) the query rate was 1 per second, but  is 
>> now down significantly.
>>
>>
>> --
>> bk
>>
>>
>>
>>
>
>
>