<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">DynDNS is being attacked.<div class=""><br class=""></div><div class="">Github, pagerduty, twitter, pingdom, and lots of other people are affected.</div><div class=""><br class=""></div><div class="">Before anyone bitches at github or Dyn, remember that Dyn is far, far better positioned to withstand attacks than a company like github could possibly be on their own. So I think github did the right thing in using Dyn.</div><br class="Apple-interchange-newline"><div class="">Let’s all be clear that Dyn has to be in the top 10 DNS infrastructures on the planet. Possibly the largest that sells DNS as a service. This is a serious attack, and the entire community should help track this miscreant down, then crush them like a bug.</div><div class=""><br class=""></div><div class=""><div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><font face="Inconsolata" class=""><span style="color: rgb(0, 0, 0); font-variant: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">-- </span></font><div style="color: rgb(0, 0, 0); font-variant: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><font face="Inconsolata" class="">TTFN,</font></div><div style="color: rgb(0, 0, 0); font-variant: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><font face="Inconsolata" class="">patrick</font></div></div></div></div></div></div></div></div>
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Oct 21, 2016, at 12:40 PM, Mathieu Goessens <<a href="mailto:gebura@poolp.org" class="">gebura@poolp.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hi,<br class=""><br class="">Anybody seeing the same thing as me ?<br class=""><br class="">$ dig <a href="http://github.com" class="">github.com</a><br class=""><br class="">; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> <a href="http://github.com" class="">github.com</a><br class="">;; global options: +cmd<br class="">;; Got answer:<br class="">;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 53105<br class="">;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0<br class=""><br class="">;; QUESTION SECTION:<br class="">;<a href="http://github.com" class="">github.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>A<br class=""><br class="">;; Query time: 3001 msec<br class="">;; SERVER: 192.44.77.1#53(192.44.77.1)<br class="">;; WHEN: Fri Oct 21 18:34:17 2016<br class="">;; MSG SIZE rcvd: 28<br class=""><br class="">$ dig ns <a href="http://github.com" class="">github.com</a> @a.gtld-servers.net.<br class=""><br class="">; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> ns <a href="http://github.com" class="">github.com</a> @a.gtld-servers.net.<br class="">;; global options: +cmd<br class="">;; Got answer:<br class="">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9288<br class="">;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 4<br class="">;; WARNING: recursion requested but not available<br class=""><br class="">;; QUESTION SECTION:<br class="">;<a href="http://github.com" class="">github.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<br class=""><br class="">;; AUTHORITY SECTION:<br class=""><a href="http://github.com" class="">github.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://ns1.p16.dynect.net" class="">ns1.p16.dynect.net</a>.<br class=""><a href="http://github.com" class="">github.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://ns3.p16.dynect.net" class="">ns3.p16.dynect.net</a>.<br class=""><a href="http://github.com" class="">github.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://ns2.p16.dynect.net" class="">ns2.p16.dynect.net</a>.<br class=""><a href="http://github.com" class="">github.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://ns4.p16.dynect.net" class="">ns4.p16.dynect.net</a>.<br class=""><br class="">$ dig <a href="http://github.com" class="">github.com</a> @ns1.p16.dynect.net.<br class=""><br class="">; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> <a href="http://github.com" class="">github.com</a> @ns2.p16.dynect.net.<br class="">;; global options: +cmd<br class="">;; connection timed out; no servers could be reached<br class=""><br class="">Same for ns2,3,4<br class=""><br class="">Tested from a few AS in France<br class=""><br class="">-- <br class="">Mathieu Goessens<br class="">IT consultant.<br class="">_______________________________________________<br class="">dns-operations mailing list<br class=""><a href="mailto:dns-operations@lists.dns-oarc.net" class="">dns-operations@lists.dns-oarc.net</a><br class="">https://lists.dns-oarc.net/mailman/listinfo/dns-operations<br class="">dns-operations mailing list<br class="">https://lists.dns-oarc.net/mailman/listinfo/dns-operations<br class=""></div></div></blockquote></div><br class=""></div></body></html>