[nsp-sec] Speaking of DNS DDoS ... 67.21.67.126 getting love.

[Stephen Gill]

Hi Folks,

>> We're seeing about 8-9000 packets per second of the spoofed queries, so I can
>> imagine the total pain is pretty reasonable.  Target:
>> 
>> AS      | IP               | AS Name
>> 46844   | 67.21.67.126     | ST-BGP - SHARKTECH INTERNET SERVICES

We have pcaps and they are massive.  32Gig spikes, averaging 25Gigs.

I can look into creating an open DNS Amp list, but I imagine it is going to
be pretty large.  

-- 
Stephen Gill, Chief Scientist, Team Cymru
http://www.cymru.com | +1 630 230 5423 | gillsr at cymru.com