[nsp-sec] Flows to 208.78.69.76, 91.198.22.76, 203.62.195.76

Tom Daly tom at dyn.com
Sun Aug 29 05:59:45 EDT 2010


Good Morning NSP-SEC'ers,

Some of our nameserver infrastructure is taking some real packet love this AM, and it doesn't appear spoofed, surprisingly. We're reviewing source IP addresses now, but wondering if people can look for some flows:

ns3.mydyndns.org, 208.78.68.76, over 3gbit/sec

ns4.mydyndns.org, 91.198.22.76, over 2gbit/sec

ns5.mydyndns.org, 203.62.195.76, unknown

Thanks,
Tom


-- 
Tom Daly
CTO, Dynamic Network Services, Inc.
Ph: 603-296-1537
http://dyn.com/




More information about the nsp-security mailing list