[nsp-sec] DNS amplification attack to 213.171.220.101

[Chris Morrow]

On Mon, 16 Feb 2009, Scott A. McIntyre wrote:

> ----------- nsp-security Confidential --------
>
> Hi,
>
>> 
>> Each device here is getting about 7-8 Queries per second...
>> 
>> Do they want these /32's NULLed?
>
>
> They are currently unable to handle the traffic they're getting, so it would 
> probably help to null, but not permanently.  I'm not sure what the systems 
> *should* be running so a full null may have longer term impact (web sites? 
> other stuff?) than they want.

respublika-kz.info	 A 	213.171.223.133
www.respublika-kz.info	 A 	213.171.223.133


some form of kazakstan thingy?? politically motivated ddos?

-Chris