smurfmonitor

@_defcon_ I've seen about 4.5 Mil queries for defcon,org today see: gist.github.com/smurfmonitor/7… from/attacking 800+ IPs.

This project is not dead, dormant perhaps, just wait and see! Soon..

Seeing a lot of DNS AMP attacks using the domain "defcon,org" that is cool, as this year I am going to be there. @_defcon_

@Trojan7Sec @snowfl0w Yeah im pretty sure.

@snowfl0w @Trojan7Sec Itd just a dns amp against that IP.

Now finally people can understand the shirts we made last year. #regin

Recently observed #NTP #amplification attacks: gist.github.com/lhaagsma/ecc7e…

Top domain today: nlhosting.nl - dnsamplificationattacks.blogspot.com/2014/10/domain… nearly 2,000,000 query attack against 54.186.252.223 (Amazon,com)

Some of the DNS Amplification domains I am currently observing: #file-domains_20141017" target="_blank" rel="nofollow noopener">gist.github.com/smurfmonitor/f…

Might have seen this attack: net-security.org/secworld.php?i… IP: 69.31.20.66 (Akamai) was also targetted.

DNS Amplification Domain bmw,digmehl,cu,cc is using @cloudflare Name Servers: pastebin.com/GtK0rEDe

DDOS party today - Total queries: 14,463,832 (11,550,539 displayed) (last 30 hours)

As usual, it has nothing to do with "DNS poisoning". But yes, google[.]co[.]id records were changed to send users to 167.114.12.10 (OVH)

@DnsSmurf Snapshot right now: gist.github.com/e430dbf5152103…

@jedisct1 this exactly

@jedisct1 @voodooKobra dat name! You can easily search for response size?

Interesting DNS response: pastebin.com/PzkBfr8Q taken from: whitehouse.gov/blog/2014/09/0… #dns #amplification

@jedisct1 @voodooKobra seeing a lot less. Mostly excisting domains being abused.

#ZeroAccess operators back in action. New #clickfraud module rolled out today.