[outages] EasyDNS DDoS

Scott, Robert D. robert at UFL.EDU
Mon Jan 9 11:27:58 EST 2012


Jan  8 03:28:05 cse209-fwsm-cns-v1202-1 %FWSM-2-106007: Deny inbound UDP from 72.52.2.1/53 to 128.227.254.102/51281 due to DNS Response    
Jan  8 03:27:37 cse209-fwsm-cns-v1202-1 %FWSM-2-106007: Deny inbound UDP from 72.52.2.1/53 to 128.227.254.102/2956 due to DNS Response     

I have been seeing unsolicited DNS replies from them since Jan 8th about 16:36 EST.  I also started seeing them from:
robert at Robert ~
$ dig +short -x 67.228.254.4
ns1.softlayer.com.

at about the same time, so I suspect they are/were also getting slammed.

Robert D. Scott           Robert at ufl.edu
Senior Network Engineer   352-273-0113 Phone
CNS - Network Services    352-392-2061 CNS Phone Tree
University of Florida     352-273-0743 FAX
Florida Lambda Rail       352-294-3571 FLR NOC
Gainesville, FL  32611    321-663-0421 Cell
                          3216630421 at messaging.sprintpcs.com


-----Original Message-----
From: outages-bounces at outages.org [mailto:outages-bounces at outages.org] On Behalf Of Michael Loftis
Sent: Saturday, January 07, 2012 6:21 PM
To: outages at outages.org
Subject: Re: [outages] EasyDNS DDoS

I can confirm, easydns spotty at best from here (Missoula, MT local ISP)

On Sat, Jan 7, 2012 at 4:02 PM, Mark Kamichoff <prox at prolixium.com> wrote:
> FYI, looks like EasyDNS' nameservers are under a DDoS...
>
> https://twitter.com/#!/easyDNS/status/155774538272092160
>
> Among other things, sites like http://soekris.com/ are either loading 
> /very/ slowly or just not at all.
>
> - Mark
>
> --
> Mark Kamichoff
> prox at prolixium.com
> http://www.prolixium.com/
>
> _______________________________________________
> Outages mailing list
> Outages at outages.org
> https://puck.nether.net/mailman/listinfo/outages
>



-- 

"Genius might be described as a supreme capacity for getting its possessors into trouble of all kinds."
-- Samuel Butler
_______________________________________________
Outages mailing list
Outages at outages.org
https://puck.nether.net/mailman/listinfo/outages




More information about the Outages mailing list