Archive for May, 2008

Uprooting of the DNS Root

May 21, 2008 by Danny McPherson

The folks at Renesys pointed out earlier this week some interesting activity surrounding the L-root name server, highlighting some activity that should give us all yet another reason to be concerned about the security and integrity of the Internet DNS. In short, L-root, operated by ICANN, was renumbered from 198.32.64.12 to 199.7.83.42. ICANN renumbered L-root [...]

Read More

YouTube Diversifies DNS; Google Next?

May 15, 2008 by Danny McPherson

Just a week after several DNS quirks cost YouTube some downtime, they appear to have added a great deal of redundancy to their previous setup, which left much to be desired. They’ve now got 7 authoritative servers listed, addressed from 3 discrete netblocks (64.15.112.0/20, 208.117.224.0/19 and 208.65.152.0/22, the latter was the original), the zone files [...]

Read More

Hitpop DDoS Bot – Analysis Available

May 15, 2008 by Jose Nazario

In the past couple of months we’ve been looking at a lot of DDoS bots, some for specific events like the CNN attacks and some for generic monitoring. This is a report we drafted about a specific bot that emerged from China dubbed “Hitpop”. It’s a basic HTTP-bot that can do generic HTTP request flooding. [...]

Read More