[nsp-sec] DNS DDoS - "." query reply flood

Rob Thomas robt at cymru.com
Mon Jun 1 11:59:32 EDT 2009


Hey, Jose.

> AS      | IP               | AS Name
> 8342    | 81.176.232.101   | RTCOMM-AS RTComm.RU Autonomous System

We've nothing obviously related, though we do see someone poking at SSH
on 81.176.232.101 back on 2009-05-15 21:04:52 UTC.  It's a manual probe,
which makes it slightly more interesting.

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru
https://www.team-cymru.org/
cmn_err(CEO_PANIC, "Out of coffee!");




More information about the nsp-security mailing list