discuss AT lists.opennicproject.org

Subject: Discuss mailing list

List archive

Re: [opennic-discuss] Traffic Flood

From: Bersl <bersl2 AT bersl2.info>
To: discuss AT lists.opennicproject.org
Subject: Re: [opennic-discuss] Traffic Flood
Date: Sun, 14 Jul 2013 23:30:51 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/14/2013 04:10 PM, Jeff Taylor wrote:
> The log entry doesn't seem to give much detail about what is going
> on. Do you know if this is directed at DNS queries or something
> else? If it's DNS, can you post an example of the query or packet
> so we can see what is being sent?

Just based off of the available records, it's one of those monstrous
RRsets with no apparent purpose but to generate large answers to short
queries; see attachment.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJR43rzAAoJEKDJEQNczrCUU/UIAIVk+OuNC4IDNHNOPEF6pcMk
0WtqjIAn6k5TijnFEx/tCpLH0qkrgAsdGp71vptOA0kpyKYJJgq+Q7yIA4AIhwra
oljgNHVKS4CxR7aAgUcwu69ueRIIR7+K1PMh/O2JdUGWbHbz14K9LXwwuVzyVE4b
lEAngl0n4D/eexvY4AIhPFcYi9SNi73LFY/k8TWp80Ud/KqnQyZAABoPyeceQs+V
PgwwJ3ndH+tue2f7CsJFIwrwaFhZMqfy+iP6KrgcseVMw6q4P4nmCtfqfnJQ9iY7
zWKNlA/fZnGIDc7Lls9yI9jzpR74BoIAPPS5Tmsn0wDS9OURGNw/JgKgLhlcS78=
=D7I/
-----END PGP SIGNATURE-----
;; Truncated, retrying in TCP mode.

; <<>> DiG 9.9.2-P2 <<>> ANY d.directedat.asia
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40201
;; flags: qr rd ra; QUERY: 1, ANSWER: 255, AUTHORITY: 2, ADDITIONAL: 3

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;d.directedat.asia. IN ANY

;; ANSWER SECTION:
d.directedat.asia. 60409 IN A 172.33.43.69
d.directedat.asia. 60409 IN A 172.33.43.70
d.directedat.asia. 60409 IN A 172.33.43.71
d.directedat.asia. 60409 IN A 172.33.43.72
d.directedat.asia. 60409 IN A 172.33.43.73
d.directedat.asia. 60409 IN A 172.33.43.74
d.directedat.asia. 60409 IN A 172.33.43.75
d.directedat.asia. 60409 IN A 172.33.43.76
d.directedat.asia. 60409 IN A 172.33.43.77
d.directedat.asia. 60409 IN A 172.33.43.78
d.directedat.asia. 60409 IN A 172.33.43.79
d.directedat.asia. 60409 IN A 172.33.43.80
d.directedat.asia. 60409 IN A 172.33.43.81
d.directedat.asia. 60409 IN A 172.33.43.82
d.directedat.asia. 60409 IN A 172.33.43.83
d.directedat.asia. 60409 IN A 172.33.43.84
d.directedat.asia. 60409 IN A 172.33.43.85
d.directedat.asia. 60409 IN A 172.33.43.86
d.directedat.asia. 60409 IN A 172.33.43.87
d.directedat.asia. 60409 IN A 172.33.43.88
d.directedat.asia. 60409 IN A 172.33.43.89
d.directedat.asia. 60409 IN A 172.33.43.90
d.directedat.asia. 60409 IN A 172.33.43.91
d.directedat.asia. 60409 IN A 172.33.43.92
d.directedat.asia. 60409 IN A 172.33.43.93
d.directedat.asia. 60409 IN A 172.33.43.94
d.directedat.asia. 60409 IN A 172.33.43.95
d.directedat.asia. 60409 IN A 172.33.43.96
d.directedat.asia. 60409 IN A 172.33.43.97
d.directedat.asia. 60409 IN A 172.33.43.98
d.directedat.asia. 60409 IN A 172.33.43.99
d.directedat.asia. 60409 IN A 172.33.43.100
d.directedat.asia. 60409 IN A 172.33.43.101
d.directedat.asia. 60409 IN A 172.33.43.102
d.directedat.asia. 60409 IN A 172.33.43.103
d.directedat.asia. 60409 IN A 172.33.43.104
d.directedat.asia. 60409 IN A 172.33.43.105
d.directedat.asia. 60409 IN A 172.33.43.106
d.directedat.asia. 60409 IN A 172.33.43.107
d.directedat.asia. 60409 IN A 172.33.43.108
d.directedat.asia. 60409 IN A 172.33.43.109
d.directedat.asia. 60409 IN A 172.33.43.110
d.directedat.asia. 60409 IN A 172.33.43.111
d.directedat.asia. 60409 IN A 172.33.43.112
d.directedat.asia. 60409 IN A 172.33.43.113
d.directedat.asia. 60409 IN A 172.33.43.114
d.directedat.asia. 60409 IN A 172.33.43.115
d.directedat.asia. 60409 IN A 172.33.43.116
d.directedat.asia. 60409 IN A 172.33.43.117
d.directedat.asia. 60409 IN A 172.33.43.118
d.directedat.asia. 60409 IN A 172.33.43.119
d.directedat.asia. 60409 IN A 172.33.43.120
d.directedat.asia. 60409 IN A 172.33.43.121
d.directedat.asia. 60409 IN A 172.33.43.122
d.directedat.asia. 60409 IN A 172.33.43.123
d.directedat.asia. 60409 IN A 172.33.43.124
d.directedat.asia. 60409 IN A 172.33.43.125
d.directedat.asia. 60409 IN A 172.33.43.126
d.directedat.asia. 60409 IN A 172.33.43.127
d.directedat.asia. 60409 IN A 172.33.43.128
d.directedat.asia. 60409 IN A 172.33.43.129
d.directedat.asia. 60409 IN A 172.33.43.130
d.directedat.asia. 60409 IN A 172.33.43.131
d.directedat.asia. 60409 IN A 172.33.43.132
d.directedat.asia. 60409 IN A 172.33.43.133
d.directedat.asia. 60409 IN A 172.33.43.134
d.directedat.asia. 60409 IN A 172.33.43.135
d.directedat.asia. 60409 IN A 172.33.43.136
d.directedat.asia. 60409 IN A 172.33.43.137
d.directedat.asia. 60409 IN A 172.33.43.138
d.directedat.asia. 60409 IN A 172.33.43.139
d.directedat.asia. 60409 IN A 172.33.43.140
d.directedat.asia. 60409 IN A 172.33.43.141
d.directedat.asia. 60409 IN A 172.33.43.142
d.directedat.asia. 60409 IN A 172.33.43.143
d.directedat.asia. 60409 IN A 172.33.43.144
d.directedat.asia. 60409 IN A 172.33.43.145
d.directedat.asia. 60409 IN A 172.33.43.146
d.directedat.asia. 60409 IN A 172.33.43.147
d.directedat.asia. 60409 IN A 172.33.43.148
d.directedat.asia. 60409 IN A 172.33.43.149
d.directedat.asia. 60409 IN A 172.33.43.150
d.directedat.asia. 60409 IN A 172.33.43.151
d.directedat.asia. 60409 IN A 172.33.43.152
d.directedat.asia. 60409 IN A 172.33.43.153
d.directedat.asia. 60409 IN A 172.33.43.154
d.directedat.asia. 60409 IN A 172.33.43.155
d.directedat.asia. 60409 IN A 172.33.43.156
d.directedat.asia. 60409 IN A 172.33.43.157
d.directedat.asia. 60409 IN A 172.33.43.158
d.directedat.asia. 60409 IN A 172.33.43.159
d.directedat.asia. 60409 IN A 172.33.43.160
d.directedat.asia. 60409 IN A 172.33.43.161
d.directedat.asia. 60409 IN A 172.33.43.162
d.directedat.asia. 60409 IN A 172.33.43.163
d.directedat.asia. 60409 IN A 172.33.43.164
d.directedat.asia. 60409 IN A 172.33.43.165
d.directedat.asia. 60409 IN A 172.33.43.166
d.directedat.asia. 60409 IN A 172.33.43.167
d.directedat.asia. 60409 IN A 172.33.43.168
d.directedat.asia. 60409 IN A 172.33.43.169
d.directedat.asia. 60409 IN A 172.33.43.170
d.directedat.asia. 60409 IN A 172.33.43.171
d.directedat.asia. 60409 IN A 172.33.43.172
d.directedat.asia. 60409 IN A 172.33.43.173
d.directedat.asia. 60409 IN A 172.33.43.174
d.directedat.asia. 60409 IN A 172.33.43.175
d.directedat.asia. 60409 IN A 172.33.43.176
d.directedat.asia. 60409 IN A 172.33.43.177
d.directedat.asia. 60409 IN A 172.33.43.178
d.directedat.asia. 60409 IN A 172.33.43.179
d.directedat.asia. 60409 IN A 172.33.43.180
d.directedat.asia. 60409 IN A 172.33.43.181
d.directedat.asia. 60409 IN A 172.33.43.182
d.directedat.asia. 60409 IN A 172.33.43.183
d.directedat.asia. 60409 IN A 172.33.43.184
d.directedat.asia. 60409 IN A 172.33.43.185
d.directedat.asia. 60409 IN A 172.33.43.186
d.directedat.asia. 60409 IN A 172.33.43.187
d.directedat.asia. 60409 IN A 172.33.43.188
d.directedat.asia. 60409 IN A 172.33.43.189
d.directedat.asia. 60409 IN A 172.33.43.190
d.directedat.asia. 60409 IN A 172.33.43.191
d.directedat.asia. 60409 IN A 172.33.43.192
d.directedat.asia. 60409 IN A 172.33.43.193
d.directedat.asia. 60409 IN A 172.33.43.194
d.directedat.asia. 60409 IN A 172.33.43.195
d.directedat.asia. 60409 IN A 172.33.43.196
d.directedat.asia. 60409 IN A 172.33.43.197
d.directedat.asia. 60409 IN A 172.33.43.198
d.directedat.asia. 60409 IN A 172.33.43.199
d.directedat.asia. 60409 IN A 172.33.43.200
d.directedat.asia. 60409 IN A 172.33.43.201
d.directedat.asia. 60409 IN A 172.33.43.202
d.directedat.asia. 60409 IN A 172.33.43.203
d.directedat.asia. 60409 IN A 172.33.43.204
d.directedat.asia. 60409 IN A 172.33.43.205
d.directedat.asia. 60409 IN A 172.33.43.206
d.directedat.asia. 60409 IN A 172.33.43.207
d.directedat.asia. 60409 IN A 172.33.43.208
d.directedat.asia. 60409 IN A 172.33.43.209
d.directedat.asia. 60409 IN A 172.33.43.210
d.directedat.asia. 60409 IN A 172.33.43.211
d.directedat.asia. 60409 IN A 172.33.43.212
d.directedat.asia. 60409 IN A 172.33.43.213
d.directedat.asia. 60409 IN A 172.33.43.214
d.directedat.asia. 60409 IN A 172.33.43.215
d.directedat.asia. 60409 IN A 172.33.43.216
d.directedat.asia. 60409 IN A 172.33.43.217
d.directedat.asia. 60409 IN A 172.33.43.218
d.directedat.asia. 60409 IN A 172.33.43.219
d.directedat.asia. 60409 IN A 172.33.43.220
d.directedat.asia. 60409 IN A 172.33.43.221
d.directedat.asia. 60409 IN A 172.33.43.222
d.directedat.asia. 60409 IN A 172.33.43.223
d.directedat.asia. 60409 IN A 172.33.43.224
d.directedat.asia. 60409 IN A 172.33.43.225
d.directedat.asia. 60409 IN A 172.33.43.226
d.directedat.asia. 60409 IN A 172.33.43.227
d.directedat.asia. 60409 IN A 172.33.43.228
d.directedat.asia. 60409 IN A 172.33.43.229
d.directedat.asia. 60409 IN A 172.33.43.230
d.directedat.asia. 60409 IN A 172.33.43.231
d.directedat.asia. 60409 IN A 172.33.43.232
d.directedat.asia. 60409 IN A 172.33.43.233
d.directedat.asia. 60409 IN A 172.33.43.234
d.directedat.asia. 60409 IN A 172.33.43.235
d.directedat.asia. 60409 IN A 172.33.43.236
d.directedat.asia. 60409 IN A 172.33.43.237
d.directedat.asia. 60409 IN A 172.33.43.238
d.directedat.asia. 60409 IN A 172.33.43.239
d.directedat.asia. 60409 IN A 172.33.43.240
d.directedat.asia. 60409 IN A 172.33.43.241
d.directedat.asia. 60409 IN A 172.33.43.242
d.directedat.asia. 60409 IN A 172.33.43.243
d.directedat.asia. 60409 IN A 172.33.43.244
d.directedat.asia. 60409 IN A 172.33.43.245
d.directedat.asia. 60409 IN A 172.33.43.246
d.directedat.asia. 60409 IN A 172.33.43.247
d.directedat.asia. 60409 IN A 172.33.43.248
d.directedat.asia. 60409 IN A 172.33.43.249
d.directedat.asia. 60409 IN A 172.33.43.250
d.directedat.asia. 60409 IN A 172.33.43.251
d.directedat.asia. 60409 IN A 172.33.43.252
d.directedat.asia. 60409 IN A 172.33.43.253
d.directedat.asia. 60409 IN A 172.33.43.254
d.directedat.asia. 60409 IN A 172.33.43.255
d.directedat.asia. 60409 IN A 172.33.43.1
d.directedat.asia. 60409 IN A 172.33.43.2
d.directedat.asia. 60409 IN A 172.33.43.3
d.directedat.asia. 60409 IN A 172.33.43.4
d.directedat.asia. 60409 IN A 172.33.43.5
d.directedat.asia. 60409 IN A 172.33.43.6
d.directedat.asia. 60409 IN A 172.33.43.7
d.directedat.asia. 60409 IN A 172.33.43.8
d.directedat.asia. 60409 IN A 172.33.43.9
d.directedat.asia. 60409 IN A 172.33.43.10
d.directedat.asia. 60409 IN A 172.33.43.11
d.directedat.asia. 60409 IN A 172.33.43.12
d.directedat.asia. 60409 IN A 172.33.43.13
d.directedat.asia. 60409 IN A 172.33.43.14
d.directedat.asia. 60409 IN A 172.33.43.15
d.directedat.asia. 60409 IN A 172.33.43.16
d.directedat.asia. 60409 IN A 172.33.43.17
d.directedat.asia. 60409 IN A 172.33.43.18
d.directedat.asia. 60409 IN A 172.33.43.19
d.directedat.asia. 60409 IN A 172.33.43.20
d.directedat.asia. 60409 IN A 172.33.43.21
d.directedat.asia. 60409 IN A 172.33.43.22
d.directedat.asia. 60409 IN A 172.33.43.23
d.directedat.asia. 60409 IN A 172.33.43.24
d.directedat.asia. 60409 IN A 172.33.43.25
d.directedat.asia. 60409 IN A 172.33.43.26
d.directedat.asia. 60409 IN A 172.33.43.27
d.directedat.asia. 60409 IN A 172.33.43.28
d.directedat.asia. 60409 IN A 172.33.43.29
d.directedat.asia. 60409 IN A 172.33.43.30
d.directedat.asia. 60409 IN A 172.33.43.31
d.directedat.asia. 60409 IN A 172.33.43.32
d.directedat.asia. 60409 IN A 172.33.43.33
d.directedat.asia. 60409 IN A 172.33.43.34
d.directedat.asia. 60409 IN A 172.33.43.35
d.directedat.asia. 60409 IN A 172.33.43.36
d.directedat.asia. 60409 IN A 172.33.43.37
d.directedat.asia. 60409 IN A 172.33.43.38
d.directedat.asia. 60409 IN A 172.33.43.39
d.directedat.asia. 60409 IN A 172.33.43.40
d.directedat.asia. 60409 IN A 172.33.43.41
d.directedat.asia. 60409 IN A 172.33.43.42
d.directedat.asia. 60409 IN A 172.33.43.43
d.directedat.asia. 60409 IN A 172.33.43.44
d.directedat.asia. 60409 IN A 172.33.43.45
d.directedat.asia. 60409 IN A 172.33.43.46
d.directedat.asia. 60409 IN A 172.33.43.47
d.directedat.asia. 60409 IN A 172.33.43.48
d.directedat.asia. 60409 IN A 172.33.43.49
d.directedat.asia. 60409 IN A 172.33.43.50
d.directedat.asia. 60409 IN A 172.33.43.51
d.directedat.asia. 60409 IN A 172.33.43.52
d.directedat.asia. 60409 IN A 172.33.43.53
d.directedat.asia. 60409 IN A 172.33.43.54
d.directedat.asia. 60409 IN A 172.33.43.55
d.directedat.asia. 60409 IN A 172.33.43.56
d.directedat.asia. 60409 IN A 172.33.43.57
d.directedat.asia. 60409 IN A 172.33.43.58
d.directedat.asia. 60409 IN A 172.33.43.59
d.directedat.asia. 60409 IN A 172.33.43.60
d.directedat.asia. 60409 IN A 172.33.43.61
d.directedat.asia. 60409 IN A 172.33.43.62
d.directedat.asia. 60409 IN A 172.33.43.63
d.directedat.asia. 60409 IN A 172.33.43.64
d.directedat.asia. 60409 IN A 172.33.43.65
d.directedat.asia. 60409 IN A 172.33.43.66
d.directedat.asia. 60409 IN A 172.33.43.67
d.directedat.asia. 60409 IN A 172.33.43.68

;; AUTHORITY SECTION:
directedat.asia. 60409 IN NS ns1.directedat.asia.
directedat.asia. 60409 IN NS ns2.directedat.asia.

;; ADDITIONAL SECTION:
ns1.directedat.asia. 60409 IN A 74.91.18.226
ns2.directedat.asia. 60409 IN A 74.91.18.226

;; Query time: 4 msec
;; SERVER: 2001:470:bbcb:11ff::9001#53(2001:470:bbcb:11ff::9001)
;; WHEN: Sun Jul 14 23:29:36 2013
;; MSG SIZE rcvd: 4194

Attachment: dig_ANY_d.directedat.asia.txt.sig
Description: Binary data

[opennic-discuss] Traffic Flood, waqas, 07/14/2013
- Re: [opennic-discuss] Traffic Flood, Jeff Taylor, 07/14/2013
  - Re: [opennic-discuss] Traffic Flood, waqas, 07/14/2013
    - Re: [opennic-discuss] Traffic Flood, Guillaume Parent, 07/14/2013
      - Re: [opennic-discuss] Traffic Flood, Waqas Ashraf, 07/14/2013
  - Re: [opennic-discuss] Traffic Flood, Bersl, 07/15/2013
    - Re: [opennic-discuss] Traffic Flood, waqas, 07/15/2013