[nsp-sec] FYI, DDoS against roots started 90 minutes ago, 4am UTC.

[Bill Woodcock]

> oh? which one? 

Uh…  All the ones we host?  :-)

> any more details?

All queries have a query ID of 0, mostly for A records, some SOA, SRV, or PTR, and most of the query strings are <random>.WwW.17175.COm or <random>.www.33Ok.com or just <random> as a TLD query.

                                -Bill




-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20140506/e5947f29/attachment-0001.sig>