[nsp-sec] EveryDNS DDoS

Tom Daly tom at dyn.com
Sat Jan 16 18:39:47 EST 2010


Hi Folks,
Can people look for flows to:

ns1.everydns.net.	13768	IN	A	208.76.62.100
ns2.everydns.net.	13768	IN	A	78.129.207.168
ns3.everydns.net.	73772	IN	A	208.76.63.100
ns4.everydns.net.	165464	IN	A	208.76.60.100

Flows would be destined to ORD or SJC.

We seem to have a >1G spoof attack occurring to EveryDNS' infrastructure.

Thanks,
Tom

-- 
Tom Daly
CTO, Dynamic Network Services, Inc.
Ph: 603-296-1537
http://dyn.com/




More information about the nsp-security mailing list