by Suff » 12 Sep 2014, 06:32
Whilst I can't actualy prove it, I did a bit of searching and I found that a DDOS (Distributed Denial Of Service) attack took down an Australian ISP DNS service over last weekend. Since then there have been a lot of outages or work related to DNS.
I suspect that what has happened is the attack has caused a review of DNS services world wide and that all the ISP's have been modifying and updating their DNS services.
Of course in any kind of work that is this wide ranging, you are likely to see people impacted. I understand why it's not publicised. If you have a vulnerability the goal is to fix it and move on before the world at large realises you are vulnerable.
This might also be why WM was seeing that the old DNS servers were still there and still reporting the wrong thing. They may be monitoring them to try and catch whoever is doing the attacks. Because attacks are done against lists of IP addresses, 12 nubmers in the format xxx.xxx.xxx.xxx. These lists are not created in a day and are shared and used for the attack.
There are 10 types of people in the world:
Those who understand Binary and those who do not.