[dns-operations] DNS ANY requests from Amazon?

Colm MacCárthaigh colm at allcosts.net
Mon Dec 17 19:08:42 UTC 2012


Hi Chris,

Can you forward me any specific IPs, logs, traffic captures, or any
other data you have off list? I'll get it to the right Amazon people
to investigate.


On Mon, Dec 17, 2012 at 11:02 AM, Chris Adams <cmadams at hiwaay.net> wrote:
> I'm seeing a bunch of DNS ANY requests to my authoritative servers with
> Amazon EC2 source IPs.  I guess somebody is now trying to run an
> amplification attack against Amazon?
>
> This is the first time I've seen Amazon targeted this way; are others
> seeing this (am I just late to the party)?
>
> --
> Chris Adams <cmadams at hiwaay.net>
> Systems and Network Administrator - HiWAAY Internet Services
> I don't speak for anybody but myself - that's enough trouble.
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs



-- 
Colm



More information about the dns-operations mailing list