Skip to Content.
Sympa Menu

discuss - [opennic-discuss] Annoying DoS

discuss AT lists.opennicproject.org

Subject: Discuss mailing list

List archive

[opennic-discuss] Annoying DoS


Chronological Thread 
  • From: Martin C <martin AT mchomenet.com>
  • To: OpenNIC discussion <discuss AT lists.opennicproject.org>
  • Subject: [opennic-discuss] Annoying DoS
  • Date: Thu, 18 Oct 2012 06:51:52 +1000
  • Openpgp: url=http://mchomenet.info/pgpkey.txt

I know it was mentioned before on this list, but I can't remember if any
IP addresses were mentioned. Anyway, I was watching the logs the other
day and noticed one IP doing a lot of lookups for the same domain over
and over again (isc.org).

I thought nothing of it until I received a notice from the VPS supplier
that I had used over 80% of my traffic quota. I have never received that
message before so I investigated into what could be using so much
traffic. Sure enough, there was that IP address again, doing several
10's of lookups a second at least.

108.162.203.21 was doing the most, followed by 173.244.212.106, and then
93.114.45.21.

I hope I haven't accidentally blocked the IP of an OpenNIC T1 testing
server, if I have, let me know. Otherwise, this is a heads up about a
possible DoS attempt which as it turned out, was highly annoying.

--
Martin C.

Attachment: signature.asc
Description: OpenPGP digital signature




Archive powered by MHonArc 2.6.19.

Top of Page