[nsp-sec] DNS Type 2 (Authoritative NS) query for "." DDoS ongoing-> Attn AS 23393 (ISPrime)

[Danny McPherson]

On Jan 20, 2009, at 8:32 AM, Smith, Donald wrote:

> Strangely enough I saw NONE.
> I checked two days of netflow. This looks like it was a very small  
> set of attackers.
> The sites involved are known for hosting porn. I suspect this is  
> some type of holy war or one porn owner fighting another?? We do  
> have decent bcp38 so it may have been dropped before any netflow was  
> created?

Or perhaps your anti-spoofing application quashed
them all?  :-)

-danny