#arpnetworks 2017-06-04,Sun

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)

WhoWhatWhen
***ziyourenxiang has quit IRC (Ping timeout: 245 seconds) [00:48]
......... (idle for 40mn)
antawyeah: this log entry doesn't look like a ddos attack on you. someone is sending you a query (which is small), hoping that your dns server is sending back a reply to the (probably spoofed, to point to the victim) source address. but your server is denying the request, so there's no amplification
awyeah: i also get those queries a lot (and also for other domains). have you considered implementing response rate limiting, so you don't reply to every request?
awyeah: (not saying that you aren't actually ddos'd, but that doesn't look like it's part of the ddos)
[01:28]
.................................................. (idle for 4h9mn)
***ziyourenxiang has joined #arpnetworks [05:39]
.................................................................. (idle for 5h28mn)
awyeahant: I am getting thousands of them per minute
And that particular domain has a large zone associated with it.
But anyway, it's denying the requests anyway, since I'm not running a recursive server.
So maybe at some point they'll get the message ;)
[11:07]
............................... (idle for 2h30mn)
***sjackso_ has joined #arpnetworks [13:38]
MeltedLux_ has joined #arpnetworks
MeltedLux has quit IRC (*.net *.split)
sjackso has quit IRC (*.net *.split)
tellnes has quit IRC (*.net *.split)
up_the_irons has quit IRC (*.net *.split)
up_the_irons has joined #arpnetworks
orwell.freenode.net sets mode: +o up_the_irons
qbit[m] has quit IRC (Ping timeout: 240 seconds)
[13:45]
tellnes has joined #arpnetworks [13:56]
qbit[m] has joined #arpnetworks
qbit[m] is now known as Guest22568
dne has quit IRC (Remote host closed the connection)
dne has joined #arpnetworks
[14:04]
............................. (idle for 2h20mn)
r0ni has quit IRC (Quit: Textual IRC Client: www.textualapp.com) [16:32]
...... (idle for 29mn)
eryc has quit IRC (Remote host closed the connection)
eryc has joined #arpnetworks
[17:01]
.... (idle for 18mn)
ziyourenxiang has quit IRC (Ping timeout: 246 seconds) [17:21]
.............................................................................. (idle for 6h29mn)
up_the_irons has quit IRC (*.net *.split)
up_the_irons has joined #arpnetworks
ChanServ sets mode: +o up_the_irons
[23:50]

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)