Skip to Content.
Sympa Menu

discuss - Re: [opennic-discuss] DoS amp attack today

discuss AT lists.opennicproject.org

Subject: Discuss mailing list

List archive

Re: [opennic-discuss] DoS amp attack today


Chronological Thread 
  • From: Guillaume Parent <gparent AT gparent.org>
  • To: discuss AT lists.opennicproject.org
  • Subject: Re: [opennic-discuss] DoS amp attack today
  • Date: Thu, 18 Apr 2013 19:14:25 -0400

For those wondering, that website is the one I was talking about when I started this thread. It happened again today. Same pattern, three IPs (very rarely more or less than three) start querying for that domain's massive text record over and over.

On Apr 18, 2013 5:05 PM, "Killman BOFH" <killman AT dkcorp.ec> wrote:
18-Apr-2013 16:04:08.472 queries: info: client 46.165.212.12#1691: query: anticardsharing.net IN TXT +E
18-Apr-2013 16:04:08.472 client: warning: client 46.165.212.12#1691: error sending response: not enough free resources
18-Apr-2013 16:04:08.517 queries: info: client 46.165.192.95#10327: query: anticardsharing.net IN TXT +E
18-Apr-2013 16:04:08.527 queries: info: client 46.165.192.131#58028: query: anticardsharing.net IN TXT +E
18-Apr-2013 16:04:08.532 queries: info: client 46.165.212.92#3584: query: anticardsharing.net IN TXT +E
18-Apr-2013 16:04:08.533 client: warning: client 46.165.212.92#3584: error sending response: not enough free resources
18-Apr-2013 16:04:08.540 queries: info: client 46.165.212.12#1691: query: anticardsharing.net IN TXT +E
18-Apr-2013 16:04:08.540 client: warning: client 46.165.212.12#1691: error sending response: not enough free resources


dkcorp.ec | CEO
Enterprise Networks
GPG Key: 0xBBDC0CDE
Community: www.sle.ec
OpenNIC Project: opennic.sle.ec
IT Security - ISO 27000 - Packet Core
Phone: +593 995 956811 | +593 07 2952-763


On Thu, Apr 18, 2013 at 3:21 PM, mike <mike AT pikeaero.com> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/18/2013 03:47 PM, Killman BOFH wrote:
> I'm having a denial of service attack the block 46.165.192.0/18

I'm not. Thanks to the bind RRL(tm) patch. :)

- --Mike

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJRcFXcAAoJEA7EcEr0emgfjSUIAJ4d+e62mLm0teypL8QVg7Mh
NkdCubeAbKUs32fQGd43oVuPPLdwl7P5txMKKDRNgfsJZ7u8bEFbqfeEXDJA7Z3M
9u0wXaV/u46zvDQlAJVoS1FwuMHWy/4E3wyS1eBHw/OwtPd6rzpxNOaHAKRgRYBJ
dCLPtOr/3FDP2buHEe5JL11s/SsrvZjcyNAhizqJz0tBJ2dwu7mtYLz5DxEkDCIu
AE2LjtYak/oZ05F+zIPua1+ryOoyZyq4bP5EOQ6ssltVHKF57ZlWHKrG13rfNSws
HTTgBG+Pv3tqNtJCSryy2vOzVunQn1nbW1MQDpG9P9NL46dmJK40Mg02/tbrvDg=
=/RYC
-----END PGP SIGNATURE-----


--------
You are a member of the OpenNIC Discuss list.
You may unsubscribe by emailing discuss-unsubscribe AT lists.opennicproject.org




Archive powered by MHonArc 2.6.19.

Top of Page