Maintained by: NLnet Labs

[Unbound-users] Random subdomain flood query

battossai
Wed Apr 1 05:47:08 CEST 2015


Hi,

Today i receive about 2000 p/s araound 4 to 5 mb/s.
That's better then yesterday.
On Mar 31, 2015 9:50 PM, "Stephane Bortzmeyer" <bortzmeyer at nic.fr> wrote:

> On Tue, Mar 31, 2015 at 11:34:09PM +0900,
>  DarkSoul <darksoul at darkbsd.org> wrote
>  a message of 53 lines which said:
>
> > Yes, these domains change quite often, unfortunately :(
> > This is an attack called water torture.
>
> Actually, no. I've seen very often the "water torture" or "random
> qnames" attack and it is the first time I see in the wild such a rapid
> change of the suffix.
>
> https://blog.secure64.com/?p=377
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://unbound.nlnetlabs.nl/pipermail/unbound-users/attachments/20150401/06d4a8d4/attachment.html>