[nsp-sec] Register.com AS 13910 DoS ?

[Chris Morrow]

On Thu, 2 Apr 2009, Rob Thomas wrote:

> ----------- nsp-security Confidential --------
>
> Hi, Daniel.
>
>> Does anybody know about an apparent DoS against AS 13910 / Register.com?
>> Apparently it's been off and on since yesterday.
>
> Anyone have the victim IP(s)?

look for what's transitting prolexic... at least:

dns044.b.register.com. - 216.21.232.44
dns187.a.register.com. - 216.21.231.187
dns021.c.register.com. - 216.21.235.21
dns010.d.register.com. - 216.21.236.10


so the 4 /24's there.