[dns-operations] what type of attack is this?

Ken Peng pyh2 at att.net
Fri Aug 9 01:51:47 UTC 2013


Hi,

All of my six nameservers have been attacking, it's against a special domain.

I grep from the last 50000 lines of log and get the attacking IPs as below.
Can you tell what type of attack it is and how to stop this? Thanks.


# tail -50000 /var/log/daemon.log|grep -i waig8.com|perl -ne 'while(<>){$hash{$1}++ if /(\d+\.\d+\.\d+\.\d+)\#\d+/}END {for (sort keys %hash){print $_,"\n"}}'
103.22.180.7
103.22.180.8
103.29.105.97
106.120.96.74
106.37.170.66
109.205.160.19
109.205.160.2
109.205.162.234
110.164.252.215
110.164.252.216
110.164.252.217
110.164.252.219
110.75.190.194
110.75.190.195
111.11.1.210
111.11.11.210
113.193.0.148
113.193.1.14
115.127.9.115
116.228.60.155
117.34.11.132
117.34.11.133
117.34.11.134
117.34.127.40
117.35.58.132
117.35.58.133
118.163.145.31
118.69.34.160
118.70.1.232
118.70.1.233
118.70.1.234
118.98.44.10
119.145.45.38
119.145.45.41
119.145.45.44
119.145.45.47
119.145.45.54
119.46.240.1
119.46.240.3
119.46.241.1
119.46.241.2
119.46.241.3
120.193.103.122
120.193.103.126
120.196.165.24
120.209.205.18
120.85.140.236
121.242.190.173
123.151.133.161
123.151.133.162
123.242.224.50
123.242.224.51
124.115.12.240
124.115.12.241
124.160.111.194
124.74.129.150
125.63.0.30
125.63.0.31
125.76.192.170
125.89.73.2
14.139.224.203
142.166.139.245
142.166.15.15
142.166.15.16
142.177.3.10
142.177.3.7
142.177.3.8
142.177.3.9
163.121.218.180
163.21.34.125
166.111.8.28
166.111.8.29
173.194.97.16
173.194.97.17
173.194.97.18
173.194.97.19
173.194.97.20
173.194.97.21
173.194.97.22
173.194.97.23
173.194.98.144
173.194.98.145
173.194.98.146
173.194.98.147
173.194.98.148
173.194.98.149
173.194.98.150
173.194.98.151
173.194.98.16
173.194.98.17
173.194.98.18
173.194.98.19
173.194.98.20
173.194.98.21
173.194.98.22
173.194.98.23
173.194.99.16
173.194.99.17
173.194.99.18
173.194.99.19
173.194.99.20
173.194.99.21
173.194.99.22
173.194.99.23
173.194.99.80
173.194.99.81
173.194.99.82
173.194.99.83
173.194.99.84
173.194.99.85
173.194.99.86
173.194.99.87
173.203.4.42
173.203.4.46
173.203.4.47
173.203.4.48
174.138.175.115
174.138.175.116
176.34.197.144
176.34.211.25
176.34.73.44
177.159.238.194
180.108.0.197
180.108.0.200
180.168.208.170
182.237.22.210
183.233.130.24
187.141.80.82
187.58.243.100
187.58.243.98
188.40.24.98
188.40.25.2
189.209.127.244
189.209.208.181
190.223.144.232
192.221.142.109
192.221.142.111
192.221.142.122
192.221.142.126
192.221.142.129
192.221.142.143
192.221.142.144
192.221.142.146
192.221.142.154
192.221.142.167
192.221.142.176
192.221.142.177
192.221.142.180
192.221.142.186
192.221.142.208
192.221.142.234
192.221.142.24
192.221.142.240
192.221.142.247
192.221.142.25
192.221.142.254
192.221.142.34
192.221.142.38
192.221.142.4
192.221.142.60
192.221.142.81
192.221.142.87
192.221.142.88
192.221.142.9
192.221.142.91
192.221.142.99
192.221.143.108
192.221.143.115
192.221.143.118
192.221.143.12
192.221.143.123
192.221.143.135
192.221.143.136
192.221.143.14
192.221.143.141
192.221.143.142
192.221.143.145
192.221.143.149
192.221.143.152
192.221.143.155
192.221.143.160
192.221.143.161
192.221.143.17
192.221.143.173
192.221.143.187
192.221.143.19
192.221.143.194
192.221.143.202
192.221.143.205
192.221.143.206
192.221.143.21
192.221.143.211
192.221.143.221
192.221.143.229
192.221.143.233
192.221.143.238
192.221.143.247
192.221.143.25
192.221.143.3
192.221.143.36
192.221.143.38
192.221.143.57
192.221.143.59
192.221.143.61
192.221.143.78
192.221.143.93
192.221.143.97
192.221.152.118
192.221.152.126
192.221.152.172
192.221.152.19
192.221.152.203
192.221.152.204
192.221.152.228
192.221.152.239
192.221.152.248
192.221.152.255
192.221.152.42
192.221.153.106
192.221.153.161
192.221.153.165
192.221.153.171
192.221.153.173
192.221.153.177
192.221.153.187
192.221.153.192
192.221.153.211
192.221.153.217
192.221.153.232
192.221.153.239
192.221.153.251
192.221.153.32
192.221.153.49
192.221.153.55
192.221.153.64
192.221.153.65
192.221.153.70
192.221.153.8
192.221.153.80
192.221.154.100
192.221.154.111
192.221.154.116
192.221.154.129
192.221.154.134
192.221.154.135
192.221.154.136
192.221.154.156
192.221.154.178
192.221.154.180
192.221.154.188
192.221.154.189
192.221.154.191
192.221.154.21
192.221.154.210
192.221.154.249
192.221.154.251
192.221.154.26
192.221.154.43
192.221.154.44
192.221.154.50
192.221.154.81
192.221.154.98
192.221.164.101
192.221.164.102
192.221.164.107
192.221.164.111
192.221.164.114
192.221.164.126
192.221.164.139
192.221.164.14
192.221.164.140
192.221.164.147
192.221.164.151
192.221.164.177
192.221.164.196
192.221.164.197
192.221.164.199
192.221.164.200
192.221.164.208
192.221.164.222
192.221.164.225
192.221.164.241
192.221.164.242
192.221.164.3
192.221.164.40
192.221.164.42
192.221.164.50
192.221.164.61
192.221.164.65
192.221.164.7
192.221.164.75
192.221.164.85
192.221.164.87
192.221.164.89
192.221.164.9
192.221.164.91
192.221.164.94
192.221.165.10
192.221.165.103
192.221.165.11
192.221.165.118
192.221.165.131
192.221.165.136
192.221.165.140
192.221.165.145
192.221.165.158
192.221.165.16
192.221.165.161
192.221.165.181
192.221.165.183
192.221.165.191
192.221.165.207
192.221.165.208
192.221.165.218
192.221.165.220
192.221.165.228
192.221.165.235
192.221.165.236
192.221.165.238
192.221.165.239
192.221.165.242
192.221.165.247
192.221.165.248
192.221.165.252
192.221.165.254
192.221.165.255
192.221.165.27
192.221.165.3
192.221.165.30
192.221.165.40
192.221.165.42
192.221.165.43
192.221.165.51
192.221.165.56
192.221.165.57
192.221.165.63
192.221.165.65
192.221.165.68
192.221.165.76
192.221.165.87
192.221.165.88
192.221.165.89
192.221.165.93
193.95.66.10
193.95.93.77
195.175.39.10
195.175.39.103
195.175.39.11
195.175.39.4
195.175.39.5
195.175.39.6
195.175.39.7
195.175.39.8
195.175.39.9
195.229.246.84
195.229.246.85
195.229.246.86
195.229.246.87
195.229.249.164
195.229.249.165
200.158.87.4
200.158.87.6
200.186.185.2
200.23.242.177
200.23.242.185
200.24.191.12
200.255.255.65
200.255.255.70
200.62.191.11
200.94.160.248
201.10.132.4
201.10.4.4
201.17.128.104
201.17.128.110
201.228.139.252
201.6.4.116
201.77.184.170
201.83.101.43
202.100.64.102
202.100.64.94
202.100.64.98
202.101.173.130
202.101.173.131
202.101.173.132
202.101.173.146
202.101.173.147
202.101.173.148
202.101.189.11
202.102.214.6
202.102.224.74
202.102.224.78
202.102.224.82
202.102.224.86
202.102.3.141
202.103.44.174
202.103.44.176
202.103.44.178
202.103.44.210
202.103.44.211
202.103.44.212
202.103.44.213
202.103.44.214
202.103.44.215
202.103.44.216
202.106.101.202
202.106.101.203
202.106.195.89
202.106.196.231
202.108.65.1
202.108.65.4
202.188.0.137
202.188.0.138
202.188.1.10
202.96.136.231
202.96.136.238
202.96.136.239
202.96.199.133
202.96.209.131
202.96.209.132
202.96.209.137
202.96.209.138
202.96.209.139
202.96.209.140
202.96.209.146
202.96.209.147
202.96.209.148
202.96.209.149
202.96.209.15
202.96.209.150
202.96.209.16
202.96.209.17
202.96.209.18
202.96.209.19
202.96.209.20
202.96.209.21
202.96.209.22
202.96.209.23
202.96.209.24
202.96.209.25
202.96.209.26
202.98.192.14
202.98.192.18
202.98.199.34
203.130.193.74
203.211.152.66
203.98.160.12
204.194.238.13
204.194.238.19
204.194.239.23
204.194.239.24
208.67.219.12
208.67.219.14
209.11.240.61
210.193.2.33
210.193.2.35
210.193.2.66
210.51.16.52
211.136.192.6
211.162.62.1
211.98.118.6
211.98.63.2
211.98.70.162
211.98.71.138
211.98.71.154
211.98.71.162
211.98.71.166
211.98.71.22
211.98.71.30
211.98.71.38
211.98.71.46
211.98.71.62
211.99.25.1
212.217.1.1
213.179.249.133
213.42.14.212
213.42.14.213
213.42.5.132
213.42.5.133
213.42.5.134
213.42.5.135
213.42.9.180
213.42.9.181
217.218.127.170
217.218.127.171
217.218.127.172
217.218.127.173
217.218.127.175
217.218.127.176
217.218.127.177
217.218.127.178
217.218.127.180
217.218.127.181
217.218.127.182
217.218.127.183
217.218.127.184
217.218.127.185
217.218.155.112
217.218.155.113
217.218.155.114
217.218.155.115
217.218.155.116
217.218.155.119
217.218.155.120
217.218.155.121
217.218.155.122
217.218.155.123
217.218.155.124
217.218.155.125
217.218.155.126
218.102.23.228
218.107.8.7
218.25.128.14
218.25.128.154
218.30.118.7
218.30.118.8
218.56.33.53
218.7.7.14
218.7.7.18
218.7.7.46
218.7.7.50
218.74.122.146
218.74.122.147
218.75.3.179
218.85.157.18
218.85.157.19
218.85.157.21
218.85.157.4
218.85.157.5
219.139.129.99
219.141.157.65
219.141.157.68
219.141.157.71
219.146.28.170
219.147.1.102
219.147.1.98
219.239.110.138
220.187.246.34
220.187.246.35
220.187.246.50
220.187.246.51
220.249.251.11
221.12.49.102
221.176.3.79
221.194.57.78
221.208.179.250
221.210.90.222
221.228.255.70
221.228.255.77
221.228.255.81
221.228.255.82
221.232.247.210
221.232.247.218
221.6.96.177
222.135.145.226
222.162.131.229
222.168.97.70
222.168.98.22
222.168.98.38
222.180.120.228
222.180.120.229
222.180.120.230
222.180.120.231
222.180.120.232
222.184.230.190
222.222.202.212
222.222.202.226
222.222.202.227
222.222.202.243
222.222.222.226
222.222.222.242
222.222.222.243
222.222.222.244
222.246.129.68
222.246.129.69
222.246.129.70
222.246.129.71
222.246.129.92
222.39.47.50
24.238.1.61
24.238.1.62
38.102.194.214
41.128.225.34
41.128.225.35
41.128.225.42
41.128.225.43
41.203.81.19
46.137.12.90
46.137.30.143
46.137.36.34
46.137.54.55
46.137.68.82
46.51.150.196
46.51.162.113
54.228.46.57
54.247.2.162
54.247.29.26
54.247.31.105
58.136.112.4
58.20.125.163
58.240.56.14
58.240.56.54
58.240.56.58
58.240.94.105
58.60.188.173
59.175.246.10
59.175.246.11
59.175.246.12
59.175.246.14
59.175.246.3
59.175.246.7
59.175.246.8
59.175.246.9
60.11.111.66
60.220.6.90
60.220.6.91
60.223.7.11
61.128.130.230
61.128.130.231
61.128.130.232
61.128.130.233
61.132.161.4
61.132.161.5
61.135.23.106
61.135.23.107
61.135.23.108
61.135.23.109
61.135.23.74
61.135.23.75
61.135.23.76
61.135.23.77
61.139.113.154
61.139.113.158
61.139.113.162
61.139.113.166
61.140.11.160
61.140.11.163
61.140.11.166
61.140.11.172
61.140.11.214
61.140.11.220
61.140.11.223
61.140.11.228
61.140.11.7
61.150.43.97
61.152.247.177
61.152.247.185
61.153.41.131
61.153.41.132
61.153.81.122
61.153.81.123
61.153.81.124
61.153.83.234
61.153.83.235
61.153.83.236
61.153.83.237
61.155.104.173
61.155.104.174
61.155.104.175
61.155.104.176
61.163.252.26
61.163.252.86
61.178.2.10
61.178.2.14
61.178.2.198
61.178.2.202
61.188.16.138
61.188.16.142
61.220.0.123
61.220.0.153
61.220.0.156
61.220.0.37
61.220.0.38
61.220.0.53
61.220.0.57
61.220.0.68
61.220.0.74
61.220.0.77
61.220.10.42
61.220.11.32
61.220.11.44
61.220.8.100
61.220.8.101
61.220.8.102
61.220.8.104
61.220.8.105
61.220.8.106
61.220.8.107
61.220.8.108
61.220.8.109
61.220.8.110
61.220.8.111
61.220.8.121
61.220.8.122
61.220.8.124
61.220.8.126
61.220.8.127
61.220.8.128
61.220.8.129
61.220.8.131
61.220.8.132
61.220.8.133
61.220.8.134
61.220.8.136
61.220.8.137
61.220.8.138
61.220.8.139
61.220.8.142
61.220.8.143
61.220.8.146
61.220.8.147
61.220.8.148
61.220.8.149
61.220.8.151
61.220.8.152
61.220.8.153
61.220.8.161
61.220.8.162
61.220.8.163
61.220.8.166
61.220.8.168
61.220.8.169
61.220.8.17
61.220.8.171
61.220.8.172
61.220.8.174
61.220.8.176
61.220.8.177
61.220.8.178
61.220.8.179
61.220.8.18
61.220.8.181
61.220.8.182
61.220.8.184
61.220.8.186
61.220.8.187
61.220.8.188
61.220.8.189
61.220.8.19
61.220.8.192
61.220.8.193
61.220.8.194
61.220.8.195
61.220.8.196
61.220.8.197
61.220.8.198
61.220.8.199
61.220.8.20
61.220.8.200
61.220.8.201
61.220.8.202
61.220.8.206
61.220.8.207
61.220.8.208
61.220.8.209
61.220.8.21
61.220.8.211
61.220.8.217
61.220.8.22
61.220.8.220
61.220.8.221
61.220.8.223
61.220.8.224
61.220.8.226
61.220.8.228
61.220.8.229
61.220.8.23
61.220.8.230
61.220.8.235
61.220.8.236
61.220.8.237
61.220.8.238
61.220.8.24
61.220.8.240
61.220.8.241
61.220.8.242
61.220.8.26
61.220.8.29
61.220.8.30
61.220.8.32
61.220.8.33
61.220.8.34
61.220.8.35
61.220.8.36
61.220.8.37
61.220.8.38
61.220.8.40
61.220.8.41
61.220.8.43
61.220.8.44
61.220.8.45
61.220.8.46
61.220.8.47
61.220.8.49
61.220.8.50
61.220.8.51
61.220.8.53
61.220.8.54
61.220.8.55
61.220.8.56
61.220.8.57
61.220.8.58
61.220.8.59
61.220.8.60
61.220.8.61
61.220.8.63
61.220.8.65
61.220.8.66
61.220.8.67
61.220.8.68
61.220.8.69
61.220.8.71
61.220.8.72
61.220.8.73
61.220.8.74
61.220.8.75
61.220.8.76
61.220.8.77
61.220.8.78
61.220.8.80
61.220.8.81
61.220.8.82
61.220.8.83
61.220.8.84
61.220.8.85
61.220.8.86
61.220.8.87
61.220.8.88
61.220.8.89
61.220.8.90
61.220.8.92
61.220.8.93
61.220.8.95
61.220.8.96
61.220.8.98
61.220.8.99
61.234.145.102
61.235.124.116
61.236.93.33
61.50.244.18
61.50.244.19
61.50.244.20
61.50.244.21
61.50.244.34
61.50.244.35
61.50.244.37
61.50.244.50
61.50.244.51
61.50.244.52
61.50.244.53
61.50.244.58
61.50.244.59
61.50.244.60
61.50.244.61
61.50.246.116
61.50.246.117
61.51.222.73
62.211.76.208
62.211.76.209
62.211.76.210
62.211.76.211
64.120.132.245
64.233.162.80
64.233.162.81
64.233.162.82
66.250.7.154
66.90.96.9
67.198.198.195
67.198.198.211
67.198.198.212
67.198.198.215
67.198.198.219
67.198.198.221
72.11.150.10
72.11.150.50
74.125.16.208
74.125.16.209
74.125.16.210
74.125.16.211
74.125.16.212
74.125.16.213
74.125.16.214
74.125.16.215
74.125.16.80
74.125.16.81
74.125.16.82
74.125.16.83
74.125.16.84
74.125.176.144
74.125.176.145
74.125.176.146
74.125.176.147
74.125.176.148
74.125.176.149
74.125.176.150
74.125.176.151
74.125.176.80
74.125.176.81
74.125.176.82
74.125.176.83
74.125.176.84
74.125.178.16
74.125.178.17
74.125.178.18
74.125.178.19
74.125.178.20
74.125.178.21
74.125.178.22
74.125.178.23
74.125.179.82
74.125.179.85
74.125.182.81
74.125.182.82
74.125.182.83
74.125.182.84
74.125.183.16
74.125.183.17
74.125.183.18
74.125.183.19
74.125.183.20
74.125.183.21
74.125.183.22
74.125.183.23
74.125.186.144
74.125.186.145
74.125.186.146
74.125.186.147
74.125.186.148
74.125.186.149
74.125.186.150
74.125.186.151
74.125.186.80
74.125.186.81
74.125.186.82
74.125.186.83
74.125.186.84
74.125.187.16
74.125.187.18
74.125.187.19
74.125.187.20
74.125.187.208
74.125.187.209
74.125.187.21
74.125.187.210
74.125.187.211
74.125.187.212
74.125.187.22
74.125.187.23
74.125.189.16
74.125.189.17
74.125.189.18
74.125.189.19
74.125.189.20
74.125.189.21
74.125.189.22
74.125.19.208
74.125.19.209
74.125.19.210
74.125.19.211
74.125.19.212
74.125.19.213
74.125.19.214
74.125.19.215
74.125.191.80
74.125.191.81
74.125.191.82
74.125.191.83
74.125.191.84
78.47.119.230
79.125.100.77
79.170.54.16
8.0.16.165
8.0.16.18
8.0.16.193
8.0.16.224
8.0.16.226
8.0.16.228
8.0.16.229
8.0.16.244
8.0.16.245
8.0.16.246
8.0.16.28
8.0.16.40
8.0.16.6
8.0.16.61
8.0.16.63
8.0.16.69
8.0.16.74
8.0.16.99
8.0.18.10
8.0.18.107
8.0.18.116
8.0.18.12
8.0.18.128
8.0.18.135
8.0.18.148
8.0.18.15
8.0.18.159
8.0.18.164
8.0.18.166
8.0.18.177
8.0.18.194
8.0.18.224
8.0.18.33
8.0.18.43
8.0.18.50
8.0.18.59
8.0.18.78
8.0.26.114
8.0.26.142
8.0.26.144
8.0.26.209
8.0.26.3
80.58.184.10
80.58.184.13
80.58.184.16
80.58.184.20
80.58.184.21
80.58.184.24
80.58.184.27
80.58.184.28
81.74.239.165
81.74.239.167
81.74.239.173
81.74.239.175
81.74.239.181
81.74.239.183
84.22.224.11
84.235.57.194
84.235.57.196
84.235.57.198
84.235.57.199
84.235.57.200
84.235.57.202
84.235.57.205
84.235.6.39
84.235.6.45
84.235.6.49
84.235.6.50
84.235.6.51
85.9.117.55
85.90.160.90
85.90.165.165
88.248.122.84
88.50.67.197
88.50.67.198
88.50.67.199
88.50.67.200
88.50.67.201
88.50.67.202
88.50.67.203
88.50.67.204
88.50.67.205
88.50.67.208
91.98.67.44
94.56.88.194
96.9.156.7
96.9.156.8
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20130808/20f03ccd/attachment.html>


More information about the dns-operations mailing list