DNSアンプ攻撃観測 3

DNS

zaikapaika.com のレスポンスが短くなってた．

$ dig @8.8.8.8 zaikapaika.com any

; <<>> DiG 9.9.2-P1 <<>> @8.8.8.8 zaikapaika.com any
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 503
;; flags: qr rd ra; QUERY: 1, ANSWER: 7, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;zaikapaika.com.			IN	ANY

;; ANSWER SECTION:
zaikapaika.com.		10087	IN	NS	a.dns.gandi.net.
zaikapaika.com.		10087	IN	NS	b.dns.gandi.net.
zaikapaika.com.		10087	IN	NS	c.dns.gandi.net.
zaikapaika.com.		10087	IN	A	217.70.184.38
zaikapaika.com.		10087	IN	MX	10 spool.mail.gandi.net.
zaikapaika.com.		10087	IN	MX	50 fb.mail.gandi.net.
zaikapaika.com.		10087	IN	SOA	a.dns.gandi.net. hostmaster.gandi.net. 1349871047 10800 3600 604800 10800

;; Query time: 47 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Fri Oct  4 12:15:01 2013
;; MSG SIZE  rcvd: 213

irlwinning.com と pkts.asia は引けなくなってる．

$ dig pkts.asia any

; <<>> DiG 9.9.2-P1 <<>> pkts.asia any
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 24288
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;pkts.asia.			IN	ANY

;; Query time: 46 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Fri Oct  4 12:10:13 2013
;; MSG SIZE  rcvd: 38

$ dig @8.8.8.8 irlwinning.com any

; <<>> DiG 9.9.2-P1 <<>> @8.8.8.8 irlwinning.com any
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 34610
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;irlwinning.com.			IN	ANY

;; Query time: 53 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Fri Oct  4 12:21:41 2013
;; MSG SIZE  rcvd: 43