FYI, looks like EasyDNS' nameservers are under a DDoS... https://twitter.com/#!/easyDNS/status/155774538272092160 Among other things, sites like http://soekris.com/ are either loading /very/ slowly or just not at all. - Mark -- Mark Kamichoff prox@prolixium.com http://www.prolixium.com/
On Sat, Jan 07, 2012 at 06:02:27PM -0500, Mark Kamichoff wrote:
FYI, looks like EasyDNS' nameservers are under a DDoS...
https://twitter.com/#!/easyDNS/status/155774538272092160
Among other things, sites like http://soekris.com/ are either loading /very/ slowly or just not at all.
Another popular site which is affected by this is DSLReports/BroadbandReports. I'm quite surprised so many people rely entirely on one provider for primary, secondary, and tertiary DNS. $ dig @a.gtld-servers.net ns dslreports.com ;; QUESTION SECTION: ;dslreports.com. IN NS ;; AUTHORITY SECTION: dslreports.com. 172800 IN NS ns1.easydns.com. dslreports.com. 172800 IN NS ns2.easydns.com. dslreports.com. 172800 IN NS remote1.easydns.com. dslreports.com. 172800 IN NS remote2.easydns.com. dslreports.com. 172800 IN NS ns6.easydns.net. Doesn't look like very much redundancy to me. Grouped by netblock: ns1.easydns.com has address 64.68.192.10 remote1.easydns.com has address 64.68.192.10 ns2.easydns.com has address 72.52.2.1 remote2.easydns.com has address 72.52.2.1 ns6.easydns.net has address 72.52.2.1 -- | Jeremy Chadwick jdc at parodius.com | | Parodius Networking http://www.parodius.com/ | | UNIX Systems Administrator Mountain View, CA, US | | Making life hard for others since 1977. PGP 4BD6C0CB |
I can confirm, easydns spotty at best from here (Missoula, MT local ISP) On Sat, Jan 7, 2012 at 4:02 PM, Mark Kamichoff <prox@prolixium.com> wrote:
FYI, looks like EasyDNS' nameservers are under a DDoS...
https://twitter.com/#!/easyDNS/status/155774538272092160
Among other things, sites like http://soekris.com/ are either loading /very/ slowly or just not at all.
- Mark
-- Mark Kamichoff prox@prolixium.com http://www.prolixium.com/
_______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages
-- "Genius might be described as a supreme capacity for getting its possessors into trouble of all kinds." -- Samuel Butler
Jan 8 03:28:05 cse209-fwsm-cns-v1202-1 %FWSM-2-106007: Deny inbound UDP from 72.52.2.1/53 to 128.227.254.102/51281 due to DNS Response Jan 8 03:27:37 cse209-fwsm-cns-v1202-1 %FWSM-2-106007: Deny inbound UDP from 72.52.2.1/53 to 128.227.254.102/2956 due to DNS Response I have been seeing unsolicited DNS replies from them since Jan 8th about 16:36 EST. I also started seeing them from: robert@Robert ~ $ dig +short -x 67.228.254.4 ns1.softlayer.com. at about the same time, so I suspect they are/were also getting slammed. Robert D. Scott Robert@ufl.edu Senior Network Engineer 352-273-0113 Phone CNS - Network Services 352-392-2061 CNS Phone Tree University of Florida 352-273-0743 FAX Florida Lambda Rail 352-294-3571 FLR NOC Gainesville, FL 32611 321-663-0421 Cell 3216630421@messaging.sprintpcs.com -----Original Message----- From: outages-bounces@outages.org [mailto:outages-bounces@outages.org] On Behalf Of Michael Loftis Sent: Saturday, January 07, 2012 6:21 PM To: outages@outages.org Subject: Re: [outages] EasyDNS DDoS I can confirm, easydns spotty at best from here (Missoula, MT local ISP) On Sat, Jan 7, 2012 at 4:02 PM, Mark Kamichoff <prox@prolixium.com> wrote:
FYI, looks like EasyDNS' nameservers are under a DDoS...
https://twitter.com/#!/easyDNS/status/155774538272092160
Among other things, sites like http://soekris.com/ are either loading /very/ slowly or just not at all.
- Mark
-- Mark Kamichoff prox@prolixium.com http://www.prolixium.com/
_______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages
-- "Genius might be described as a supreme capacity for getting its possessors into trouble of all kinds." -- Samuel Butler _______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages
participants (4)
-
Jeremy Chadwick -
Mark Kamichoff -
Michael Loftis -
Scott, Robert D.