DDOS Atatck on BIND 9.8.0

[Amit Gupta]

Hi 

We  are running BIND 9.8.0 on Solaris 10 machine.

We  are getting continuous hits from various  IPs to  isc.org (snoop report
attached)

 

Due to it our DNS is not responding to  other genuine query and users are
not able to browse.

 

 

0.00002 59.178.138.195 -> 203.94.243.70 DNS C isc.org. Internet * ?

929   0.00000 59.178.51.128 -> 203.94.243.70 DNS C isc.org. Internet * ?

937   0.00000 59.178.166.44 -> 203.94.243.70 DNS C isc.org. Internet * ?

944   0.00000 120.59.103.34 -> 203.94.243.70 DNS C isc.org. Internet * ?

949   0.00000 59.180.142.190 -> 203.94.243.70 DNS C isc.org. Internet * ?

955   0.00001 59.178.50.68 -> 203.94.243.70 DNS C isc.org. Internet * ?

964   0.00000 120.60.156.1 -> 203.94.243.70 DNS C isc.org. Internet * ?

969   0.00001 59.180.159.121 -> 203.94.243.70 DNS C isc.org. Internet * ?

973   0.00000 59.178.182.103 -> 203.94.243.70 DNS C isc.org. Internet * ?

980   0.00000 59.178.169.247 -> 203.94.243.70 DNS C isc.org. Internet * ?

983   0.00000 59.178.162.136 -> 203.94.243.70 DNS C isc.org. Internet * ?

993   0.00003 120.59.108.86 -> 203.94.243.70 DNS C isc.org. Internet * ?

998   0.00000 59.178.51.96 -> 203.94.243.70 DNS C isc.org. Internet * ?

999   0.00010 120.56.185.176 -> 203.94.243.70 DNS C isc.org. Internet * ?

1001   0.00000 59.180.146.89 -> 203.94.243.70 DNS C isc.org. Internet * ?

1015   0.00002 59.178.177.217 -> 203.94.243.70 DNS C isc.org. Internet * ?

1027   0.00000 59.178.62.149 -> 203.94.243.70 DNS C isc.org. Internet * ?

1028   0.00000 59.178.165.0 -> 203.94.243.70 DNS C isc.org. Internet * ?

1037   0.00000 59.180.140.93 -> 203.94.243.70 DNS C isc.org. Internet * ?

1064   0.00000 59.178.183.73 -> 203.94.243.70 DNS C isc.org. Internet * ?

1093   0.00000 59.177.139.7 -> 203.94.243.70 DNS C isc.org. Internet * ?

1103   0.00001 59.183.143.46 -> 203.94.243.70 DNS C isc.org. Internet * ?

 

Thanks 

Amit 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20120921/69328948/attachment.html>