dns-operations AT lists.opennicproject.org

Subject: Dns-operations mailing list

List archive

Re: [opennic-dns-operations] Banning 206.225.82.0/24 netblock for 48 hours.

From: Jeff Taylor <shdwdrgn AT sourpuss.net>
To: dns-operations AT lists.opennicproject.org
Subject: Re: [opennic-dns-operations] Banning 206.225.82.0/24 netblock for 48 hours.
Date: Sun, 21 Apr 2013 21:44:17 -0600

This netblock has changed their query since I blocked them earlier
tonight. Now focused on 153.172.80.74. I'm wondering if they are
trying to ddos the server at 153.172.80.74?

21:42:00.985375 IP 206.225.82.246.49230 > 216.87.84.211.53: 2+ A?
153.172.80.74.cblplus.anti-spam.org.cn. (56)
21:42:00.986596 IP 206.225.82.214.36254 > 216.87.84.211.53: 33+ A?
153.172.80.74.niku.2ch.net. (44)
21:42:00.989297 IP 206.225.82.240.32781 > 216.87.84.211.53: 42+ A?
153.172.80.74.work.drbldf.dsbl.ru. (51)
21:42:01.003892 IP 206.225.82.246.43706 > 216.87.84.211.53: 124+ A?
153.172.80.74.dnsbl.sorbs.net. (47)
21:42:01.014850 IP 206.225.82.240.39879 > 216.87.84.211.53: 51+ A?
153.172.80.74.bhnc.njabl.org. (46)

[opennic-dns-operations] Banning 206.225.82.0/24 netblock for 48 hours., Guillaume Parent, 04/21/2013
- Re: [opennic-dns-operations] Banning 206.225.82.0/24 netblock for 48 hours., Jeff Taylor, 04/21/2013
  - Re: [opennic-dns-operations] Banning 206.225.82.0/24 netblock for 48 hours., Jeff Taylor, 04/21/2013
    - Re: [opennic-dns-operations] Banning 206.225.82.0/24 netblock for 48 hours., Guillaume Parent, 04/21/2013
      - Re: [opennic-dns-operations] Banning 206.225.82.0/24 netblock for 48 hours., Guillaume Parent, 04/21/2013
- <Possible follow-up(s)>
- Re: [opennic-dns-operations] Banning 206.225.82.0/24 netblock for 48 hours., Kenny Taylor, 04/22/2013