North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Ongoing DDoS helped by non responsive abuse desks

  • From: Martin Lathoud
  • Date: Thu Mar 23 11:36:13 2006
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=XDutwCrjcCFKwi7PSkJp+GkEH4Fnb+kCBU40IBb694OD0+QIZz1wYp+AAaWMkPs54sEEK44CZr7atyCGFS05lJpchqUXGLw7Mg1FOfF9juxH0zsE9wH4pblJ5QyIiPYj/lLPOE2OBdPFwlbhWuz2WPzfiUfEwLGd12YMWmOBkZ8=
2006/3/23, Steve Atkins <[email protected]>:
> [snip]
> >
> > target[0]="http://weerona.com/ph/order.php?%rand%";
> > target[1]="http://fabutons.info/aw/001/?%rand%";
> > target[2]="http://movi96.dayaugusta.com/aspx/search.asp?t=%rand%";
> > target[3]="http://www.fakeidonline.com/store.php?%rand%";
> > target[4]="http://ccebak.bestti.info/p/?%rand%";
> > target[5]="http://www.zpgo.net/pweb7/texpo/?%rand%";
> > target[6]="http://www.tex-win.com/productshow.asp?id=1808&%rand%=%
> > rand%"
> > target[7]="http://7eklp9g3.tagsully.net/p/?%rand%&zz=lowcost";
> >
>
> Which of these is your website?
none,  they change A records of these rogue domains as they see fit to
spread the attack among more victims.