An Example of (Massive) DNS Amplification

% dig @sfba.sns-pb.isc.org. any isc.org. +norec +dnssec +qr

 

; <<>> DiG 9.8.3-P1 <<>> @sfba.sns-pb.isc.org. any isc.org. +norec +dnssec +qr

; (2 servers found)

;; global options: +cmd

;; Sending:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37911

;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

 

;; OPT PSEUDOSECTION:

; EDNS: version: 0, flags: do; udp: 4096

;; QUESTION SECTION:

;isc.org. IN ANY

 

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37911

;; flags: qr aa; QUERY: 1, ANSWER: 26, AUTHORITY: 0, ADDITIONAL: 15

 

;; OPT PSEUDOSECTION:

; EDNS: version: 0, flags: do; udp: 4096

;; QUESTION SECTION:

;isc.org. IN ANY

 

;; ANSWER SECTION:

isc.org. 7200 IN SOA ns-int.isc.org. hostmaster.isc.org. 2013082000 7200 3600 24796800 3600

isc.org. 7200 IN RRSIG SOA 5 2 7200 20130918233243 20130819233243 50012 isc.org. t9L/wDGVhEISW/digwNQceDdgY74QhCRt7aZaOTfC/iSyIeCGH7Pgy8z OzlRpL5KpMLZKcP522pFOXGOOwuz/p6c62nMxOEuKo9TzFc5w/J8B+IM rFFVJ6SbOAX9fmRmrwhoWyYQCjkUIUHTZjDgb6bHJf4dHZPc5fj15q46 Qyk=

isc.org. 7200 IN NS ord.sns-pb.isc.org.

isc.org. 7200 IN NS ams.sns-pb.isc.org.

isc.org. 7200 IN NS ns.isc.afilias-nst.info.

isc.org. 7200 IN NS sfba.sns-pb.isc.org.

isc.org. 7200 IN RRSIG NS 5 2 7200 20130918233243 20130819233243 50012 isc.org. wiGFwafSWLt/gFmyXB6qBgYeojVMjFe1qDqvuUBsjWQAt/S9kTAirsZh qgd1PES+xUCA7hsV6jgnfqbuigp/1qtSjW8/O8DO5SUjmKfM/uOnb8WJ rxevj8CdGPYPITf8ICAMNMQlwPkqd7L2gqbhfbuWnZdGD/t9TCW2eRNu rN8=

isc.org. 60 IN A 149.20.64.69

isc.org. 60 IN RRSIG A 5 2 60 20130918233243 20130819233243 50012 isc.org. CGtHJ+4D/ygVkgT8J4bQheyFwt4s6duvNR2QKLOW4Cmna3hHU3IIjfy8 mQANnOb3Dgz16xp57MkIl/8LlC8LjY8ZxfNfhAm+0W74B/S1Y6Te0pO/ G0KKr6WVCUiYluAGqBjmixUu+z88k7UYkLTJrSErbpHl2Ct7VKQNBymE qPM=

isc.org. 7200 IN MX 10 mx.pao1.isc.org.

isc.org. 7200 IN RRSIG MX 5 2 7200 20130918233243 20130819233243 50012 isc.org. I8ecf/VkzkcHRUvC9zituX4yok3GpHlMY9gNAfbDtF+P7ifhZpudlnFO bzjSVL78JijELPVk6x2Z/2KrN2fe3eMjQPTDlVxpsESk1OUTsiwrGqGf nyWBc9z3cgbV+FmfuIYUyjUvPcwpCGGDZh2JUspSbtv+av779wbNN4wr 6qE=

isc.org. 7200 IN TXT "$Id: isc.org,v 1.1845 2013-08-16 16:16:50 dmahoney Exp $"

isc.org. 7200 IN TXT "v=spf1 a mx ip4:204.152.184.0/21 ip4:149.20.0.0/16 ip6:2001:04F8::0/32 ip6:2001:500:60::65/128 ~all"

isc.org. 7200 IN RRSIG TXT 5 2 7200 20130918233243 20130819233243 50012 isc.org. Z420DKLalOPgWjxZdpExAbi8K+j4xEMlg8PnL2tQw5aiRcz7y8qNyYYg 4LToddQtULTfOurfzRFtMNF/mDQpFVnEcLRPL05XwbFrsXtuKFlpg2eU JyT8CbcjzdeYRjQi08pBofOEnzVpb2JecHb/Q1ZQrKAqgi0i+3Oc9HB+ TQU=

isc.org. 60 IN AAAA 2001:4f8:0:2::69

isc.org. 60 IN RRSIG AAAA 5 2 60 20130918233243 20130819233243 50012 isc.org. EIvEtEC3ibOJBDO9N8Czwzy/8Mhx2ivOMP/ev6NiBvlJuoNCADLmBMvJ wyvec+1iuIr9RN3a1NPI2cjsClhrLbeHz3xGcYL2iSAMJF7C7b45P4Tt MHJk5FBUpT2hkMhaKmn2ZaNcg9JUfvSRvJfh+NoyGkKidUzUd4VCe3GY 7G4=

isc.org. 7200 IN NAPTR 20 0 "S" "SIP+D2U" "" _sip._udp.isc.org.

isc.org. 7200 IN RRSIG NAPTR 5 2 7200 20130918233243 20130819233243 50012 isc.org. O5Z0MLFgIaGST2aRl3SMwIGYuakkvENF3Aimp4JtLGto7IVkZPFzKp+f TMeLGMwNRSreYO4CY1aNVmjMfbr9+ycEPUs5ofYktEYa0nwxyHegmUyK 8TP9Qb89DeZ5hF4FGH+Qh5qSEaBtwrqikP6iCqKeGBAMyO2jSE+AbCHQ Rkk=

isc.org. 3600 IN NSEC _adsp._domainkey.isc.org. A NS SOA MX TXT AAAA NAPTR RRSIG NSEC DNSKEY SPF

isc.org. 3600 IN RRSIG NSEC 5 2 3600 20130918233243 20130819233243 50012 isc.org. wfE3BPFWj+ym2LbX2hQNUIalRj/PKu1v/F5OSUthdX/DB1813j26FcTq 6eOP3kKETQcKDPk1bd4ium3t/PN7fCSdoOJW+QpNE+zrBX8eZgxvzPrH j/oXRqxJZE83E2+bZMOEm42jJvrQkiWreN9B2UIC0gKBR91KcY4d/JW6 8is=

isc.org. 7200 IN DNSKEY 257 3 5 BEAAAAOhHQDBrhQbtphgq2wQUpEQ5t4DtUHxoMVFu2hWLDMvoOMRXjGr hhCeFvAZih7yJHf8ZGfW6hd38hXG/xylYCO6Krpbdojwx8YMXLA5/kA+ u50WIL8ZR1R6KTbsYVMf/Qx5RiNbPClw+vT+U8eXEJmO20jIS1ULgqy3 47cBB1zMnnz/4LJpA0da9CbKj3A254T515sNIMcwsB8/2+2E63/zZrQz Bkj0BrN/9Bexjpiks3jRhZatEsXn3dTy47R09Uix5WcJt+xzqZ7+ysyL KOOedS39Z7SDmsn2eA0FKtQpwA6LXeG2w+jxmw3oA8lVUgEf/rzeC/bB yBNsO70aEFTd

isc.org. 7200 IN DNSKEY 256 3 5 BQEAAAABwuHz9Cem0BJ0JQTO7C/a3McR6hMaufljs1dfG/inaJpYv7vH XTrAOm/MeKp+/x6eT4QLru0KoZkvZJnqTI8JyaFTw2OM/ItBfh/hL2lm Cft2O7n3MfeqYtvjPnY7dWghYW4sVfH7VVEGm958o9nfi79532Qeklxh x8pXWdeAaRU=

isc.org. 7200 IN RRSIG DNSKEY 5 2 7200 20130918230128 20130819230128 12892 isc.org. L6ZkWGfnC6/FUXte4BpD3SNnBfHahJ87ckYPU+vBXBjcXgQUdSoPdnqq x7+jqA42+hmwaD/WOup1Rxgb0wlEV8l+ZyqBBv+aZOgWqSyqzzVhg8AI J9wUEEET9VZrGr5ya/CdyNMxNrmih9M20YNEoYvOMbKDmGsVQtGlq03+ Av3p1aWv7HBT6ajXN8sFFPDEXNlw0D0pkPaOD7hc6fwWwY5vcK2CxrZl gTcefnJn7vRdueI/9Q5PmLKx8pjRuR4onUmkslFVbJlofUlg+N1ykfxg zyiBrU9uwbZa//hfWtAsBaYVf4wHwp+4iS4W5/NfC4DslaSBOlMRKID5 jAtR1w==

isc.org. 7200 IN RRSIG DNSKEY 5 2 7200 20130918230128 20130819230128 50012 isc.org. OEvmY2EpSR7uAPewZd12L/2SM8ZyN3ysl7ofjWLTjCKftpqXfMm7uXam BtlQeIEB3FMgmoDAAPBhR2Bw59Xnt5zlyQAR37kKaZq+3VoP8H4xHQeP Lw7iQhvHLRLazL0tZPx4hM5PixRO1KrvZcKlCqmCsLfGZakis5nfV7A/ VvA=

isc.org. 7200 IN SPF "v=spf1 a mx ip4:204.152.184.0/21 ip4:149.20.0.0/16 ip6:2001:04F8::0/32 ip6:2001:500:60::65/128 ~all"

isc.org. 7200 IN RRSIG SPF 5 2 7200 20130918233243 20130819233243 50012 isc.org. Q/NSQ6Pow4aIqzC1fVR/GPTQ4HBqdlEpz5Wf1ShWTMFXXS3TzwIp3yJ9 bTT0msdUpla33D3dWJUQh85n+9GySiFUfoOaH02E+sd/3mibXsbxeTll HuCPUrsrRzY9lPa+WtDlU367objPQdUPgnmj9bUc0nnZbTlvUw2US2+i bUE=

 

;; ADDITIONAL SECTION:

ams.sns-pb.isc.org. 7200 IN A 199.6.1.30

ams.sns-pb.isc.org. 7200 IN AAAA 2001:500:60::30

ord.sns-pb.isc.org. 7200 IN A 199.6.0.30

ord.sns-pb.isc.org. 7200 IN AAAA 2001:500:71::30

sfba.sns-pb.isc.org. 7200 IN A 149.20.64.3

sfba.sns-pb.isc.org. 7200 IN AAAA 2001:4f8:0:2::19

mx.pao1.isc.org. 3600 IN A 149.20.64.53

mx.pao1.isc.org. 3600 IN AAAA 2001:4f8:0:2::2b

asterisk.isc.org. 300 IN A 149.20.32.15

ams.sns-pb.isc.org. 7200 IN RRSIG A 5 4 7200 20130918233243 20130819233243 50012 isc.org. XV5SXkma6ezqauSvzAmUqSvneDM0UYKSVcaj7tja0WY8NDsJKmvDU7BK r6gDKfST8Hhsg2/AwEjVGazNzLBTmj02cya7LNLJdVc+xLcUP9ZxPK0d JSzHdpSi0LaOD7ybWbPBjgC9J6qwoi0DUPuiyNliXGqK8ITyDPKP1MM0 nyI=

ams.sns-pb.isc.org. 7200 IN RRSIG AAAA 5 4 7200 20130918233243 20130819233243 50012 isc.org. CFsVsII/r8gU6ClL6C94F2jdhogMNAKeQHIFJLzedgxd8GvnCwbeicVW ylh1BENyDe5el+MjpEzfYt6yKU3p3KJ2lFvtBM9oT1ShBpqlgK+HpdgD OHOqC/XohvC7wcjeQPRB8tBV3kKcDkEUEkYCS2MqAeUemt2tI+5oHNjz kNY=

ord.sns-pb.isc.org. 7200 IN RRSIG A 5 4 7200 20130918233243 20130819233243 50012 isc.org. WvuLT/uwyKPt/I5rdehedqTk2dw1vZHyKOLWWBF6w4AXdmhtoUdfEjO3 LPYO2ST9SFAGR+K08kTySco1ETLyBd83HKWnr/bnU/bw3RtfIUQs3jxY a7W8aByj/DOI5zR/YD69Wb0nPkjD3WRRyGUN/QYkYLzegvvZ2jxVvNDS PYE=

ord.sns-pb.isc.org. 7200 IN RRSIG AAAA 5 4 7200 20130918233243 20130819233243 50012 isc.org. EbPkkD6Lfu7AYOKeeXWzxwn584GFV2AbVZkZv6a4muL5ArzrmRAxMuXg VhA1b0m+BvPidd6vOYdTVavUj8BbWxsNqEpQoVQbuvYxGLc5KPSvHeoE jTNKpklMtTfC/8lDlzxnEsO8crgpeUKpqEbvIpGevyxR1GadnrWwmDMh xpM=

sfba.sns-pb.isc.org. 7200 IN RRSIG A 5 4 7200 20130918233243 20130819233243 50012 isc.org. oXLB1qTapYgLb0qWiDl32HSWY3dLbohcoV0Yw8xhevVZkW4lwbaUDH1v Lm+BBu7zh5hIQViyRJ1rP9YHQa7QtD4qknkDGqn8BB4o4Zv8pGlN019t nTOVXgQOYqw/D8n5WencYuynIfBENKLKEaiie7KlMoUZBK9V9zF9CWae Soo=

 

;; Query time: 24 msec

;; SERVER: 2001:4f8:0:2::19#53(2001:4f8:0:2::19)

;; WHEN: Fri Aug 23 15:37:03 2013

;; MSG SIZE  rcvd: 4077

Showing results for 
Search instead for 
Do you mean