Looks like someone using the dns vpn to me.
It could easily be a virus talking back for instructions though.
Quoting Dan Nica <[EMAIL PROTECTED]>:
since sunday night the DDOS stared, I think
it is a new virus, but we didn't find anything about this
virus ...
we have limited the queries with a
On Wed, 2007-10-10 at 09:40 -0600, Darren Gamble wrote:
> Hi Brad,
>
> > I am using this release: pdns-recursor-3.1.4-1.i386.rpm
> >
> > The memory usage on the pdns_recursor daemon seems to keep growing
> > steadily. I currently have it set to cap at 1 million cache entries.
> My
> > graphs show
Hi Brad,
> I am using this release: pdns-recursor-3.1.4-1.i386.rpm
>
> The memory usage on the pdns_recursor daemon seems to keep growing
> steadily. I currently have it set to cap at 1 million cache entries.
My
> graphs show me hitting upwards of 1.07 million entries. I am currently
> at 287MB f
since sunday night the DDOS stared, I think
it is a new virus, but we didn't find anything about this
virus ...
we have limited the queries with an iptables rule :)
On Wed, 10 Oct 2007, GAVARRET, David wrote:
> Hi all,
>
> it seems that, at least in France since monday, we are under a massive
Hi all,
it seems that, at least in France since monday, we are under a massive
DDOS attack, with tons of queries (probably coming from some customers'
zombies PC) concerning nx hosts on some russian domains like the
following :
q6y8La01ami4707SmEIY0R5SJ8.ultra-online.ru
60G6eR2dAgC1VTA43ox4F0Cu3JJ
