DDOS Atatck on BIND 9.8.0
Amit Gupta
jtosys at bol.net.in
Fri Sep 21 09:56:23 UTC 2012
Hi
We are running BIND 9.8.0 on Solaris 10 machine.
We are getting continuous hits from various IPs to isc.org (snoop report
attached)
Due to it our DNS is not responding to other genuine query and users are
not able to browse.
0.00002 59.178.138.195 -> 203.94.243.70 DNS C isc.org. Internet * ?
929 0.00000 59.178.51.128 -> 203.94.243.70 DNS C isc.org. Internet * ?
937 0.00000 59.178.166.44 -> 203.94.243.70 DNS C isc.org. Internet * ?
944 0.00000 120.59.103.34 -> 203.94.243.70 DNS C isc.org. Internet * ?
949 0.00000 59.180.142.190 -> 203.94.243.70 DNS C isc.org. Internet * ?
955 0.00001 59.178.50.68 -> 203.94.243.70 DNS C isc.org. Internet * ?
964 0.00000 120.60.156.1 -> 203.94.243.70 DNS C isc.org. Internet * ?
969 0.00001 59.180.159.121 -> 203.94.243.70 DNS C isc.org. Internet * ?
973 0.00000 59.178.182.103 -> 203.94.243.70 DNS C isc.org. Internet * ?
980 0.00000 59.178.169.247 -> 203.94.243.70 DNS C isc.org. Internet * ?
983 0.00000 59.178.162.136 -> 203.94.243.70 DNS C isc.org. Internet * ?
993 0.00003 120.59.108.86 -> 203.94.243.70 DNS C isc.org. Internet * ?
998 0.00000 59.178.51.96 -> 203.94.243.70 DNS C isc.org. Internet * ?
999 0.00010 120.56.185.176 -> 203.94.243.70 DNS C isc.org. Internet * ?
1001 0.00000 59.180.146.89 -> 203.94.243.70 DNS C isc.org. Internet * ?
1015 0.00002 59.178.177.217 -> 203.94.243.70 DNS C isc.org. Internet * ?
1027 0.00000 59.178.62.149 -> 203.94.243.70 DNS C isc.org. Internet * ?
1028 0.00000 59.178.165.0 -> 203.94.243.70 DNS C isc.org. Internet * ?
1037 0.00000 59.180.140.93 -> 203.94.243.70 DNS C isc.org. Internet * ?
1064 0.00000 59.178.183.73 -> 203.94.243.70 DNS C isc.org. Internet * ?
1093 0.00000 59.177.139.7 -> 203.94.243.70 DNS C isc.org. Internet * ?
1103 0.00001 59.183.143.46 -> 203.94.243.70 DNS C isc.org. Internet * ?
Thanks
Amit
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20120921/69328948/attachment.html>
More information about the bind-users
mailing list