[nsp-sec] NSP-SEC-6364-ALERT 12-15 Gbps DNS Amplification attack against 31.222.133.87/32

Jon Lewis jlewis at lewis.org
Tue Apr 30 11:57:22 EDT 2013


I'm no longer "there", but I was able to verify and notify AS6364 about 
their host participating in the attack.  Incidentally, it looks as if it's 
also been attacking 178.219.244.145, but at a lower volume.  69.28.64.174 
apppears to have stopped participating (looks filtered/shut down) this 
morning shortly after 6:30am EDT.

----------------------------------------------------------------------
  Jon Lewis, MCP :)           |  I route
                              |  therefore you are
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________



More information about the nsp-security mailing list