26 Dec
2015
26 Dec
'15
9:26 a.m.
FYI: This is how a DNS attack reply profile looks like...
(Seen via AMPR gateway, as someone uses YO addresses as the reply address)
The reply amplification can be nicely seen for each attack sequence – targets are some
hosts in China.
http://www.yo2loj.ro/files/dns_attack_replies.png
73s de Marius, YO2LOJ
26 Dec
26 Dec
9:35 a.m.
Marius;
On Sat, 2015-12-26 at 17:26 +0200, Marius Petrescu wrote:
FYI: This is how a DNS attack reply profile looks
like...
(Seen via AMPR gateway, as someone uses YO addresses as the reply address)
The reply amplification can be nicely seen for each attack sequence – targets are some
hosts in China.
http://www.yo2loj.ro/files/dns_attack_replies.png
Not only have I seen these, but also ping floods. Moreso ping floods
than DNS attacks on this side of the ocean... along with your typical
botnet telnet/ssh probes.
--
The only thing worse than an extreme left-wing state is an extreme
left-wing commonwealth protected by the sovereign doctrine.
73 de Brian - N1URO
email: (see above)
Web: http://www.n1uro.net/
Ampr1: http://n1uro.ampr.org/
Ampr2: http://nos.n1uro.ampr.org
Linux Amateur Radio Services
axMail-Fax & URONode
http://uronode.sourceforge.net
http://axmail.sourceforge.net
AmprNet coordinator for:
Connecticut, Delaware, Maine,
Maryland, Massachusetts,
New Hampshire, Pennsylvania,
Rhode Island, and Vermont.
3256
days inactive
3256
days old
1 comments
2 participants
participants (2)
-
Brian -
Marius Petrescu