Need help in flushing DNS

Andree Toonk andree+nanog at toonk.nl
Thu Jun 20 07:31:21 UTC 2013


.-- My secret spy satellite informs me that at 2013-06-19 10:34 PM  Paul
Ferguson wrote:

>  ; <<>> DiG 9.7.3 <<>> @localhost yelp.com A
<SNIP>
>  ;; ANSWER SECTION:
>  yelp.com. 300 IN A 204.11.56.20

Interesting to see that traffic to this IP addresses is going through
prolexic...
I guess they're considering this as a DOS.

andree at bofh:~/src$ traceroute  204.11.57.20
traceroute to 204.11.57.20 (204.11.57.20), 64 hops max, 52 byte packets
 1  10.200.200.200 (10.200.200.200)  17.089 ms  13.144 ms  13.552 ms
 2  67.215.89.1 (67.215.89.1)  20.963 ms  15.371 ms  17.026 ms
 3  67.215.93.14 (67.215.93.14)  20.486 ms  14.458 ms  16.917 ms
 4  ge-0-7-0-5.r06.snjsca04.us.bb.gin.ntt.net (128.241.219.145)  19.449
ms  19.375 ms  15.274 ms
 5  ae-2.prolexic.snjsca04.us.bb.gin.ntt.net (128.241.219.242)  17.107
ms  23.272 ms  16.019 ms
 6  209.200.184.34 (209.200.184.34)  14.878 ms  19.062 ms  15.776 ms
 7  unknown.prolexic.com (72.52.30.126)  67.871 ms  64.376 ms  66.988 ms
 8  domain.not.configured (204.11.57.20)  71.729 ms  65.830 ms  67.823 ms


Reflection attacks are so yesterday...

Cheers,
 Andree





More information about the NANOG mailing list