[dns-operations] DDoS attack data collection
chort at smtps.net
Sat Jan 31 07:28:44 UTC 2009
BTW they're getting smarter.
Jan 30 19:25:02 imhotep named: client 188.8.131.52#53: view
(cache) './NS/IN' denied
That's the only one from port 53 I've seen so far, but it looks like
they're adapting their tactics.
On Jan 27, 2009, at 4:47 PM, Duane Wessels wrote:
> OARC is cooardinating collection of data that could help security
> researchers better understand this attack. If you are willing to
> help out by sending us some packet captures, please consider running
> the shell script found on our web page: https://www.dns-oarc.net/node/171
> Duane W.
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
More information about the dns-operations