Discuss mailing list

[Killman Hack <killman AT dkcorp.ec>]

I've blocked the following IP address queries excess

IP: 201222176226

owner: Telefónica Chile SA

# 20813: query: azpremiumsa.homedns.org IN A +

07-Oct-2012 12:37:27.547 queries: info: client 201 222 176 226 # 20813: query: azpremiumsa.homedns.org IN A +

07-Oct-2012 12:37:27.961 queries: info: client 201 222 176 226 # 20813: query: azpremiumsa.homedns.org IN A +

07-Oct-2012 12:37:28.865 queries: info: client 201 222 176 226 # 20813: query: azpremiumsa.homedns.org IN A +

07-Oct-2012 12:37:29.773 queries: info: client 201 222 176 226 # 20813: query: azpremiumsa.homedns.org IN A +

dkcorp.ec
Enterprise Networks

GPG Key: 0xBBDC0CDE

Professional IT Consultant &

UNIX Platform | UNIX Legion

On Sun, Sep 30, 2012 at 10:34 PM, Brian Koontz <brian AT opennicproject.org> wrote:

On Sat, Sep 29, 2012 at 07:36:43PM -0500, woodq11 AT gmail.com wrote:
> Please keep us updated one what's going on and good luck.

As it turns out, there was a DDOS going on.  My ISP didn't pick it up
because it was only directed at my host, and apparently didn't impact
anything else downstream to the point where they got any complaints
from other customers.  At any rate, the owner blocked all the IPs on
the list Jeff posted here, problem solved.

At one point, I was getting hammered with 3-10Mbps of traffic,
sustained over several hours.  It was no wonder I couldn't get a word
in SSH-wise to the server!

  --Brian

--
OpenNIC (the sequel) co-founder and wikimaster
IRC: Freenode.net channel #opennic

--------
You are a member of the OpenNIC Discuss list.
You may unsubscribe by emailing discuss-unsubscribe AT lists.opennicproject.org