Targeted victims, beginning 28-Jan-2009, as seen from my DNS server.
GeoIP data for top two sites also below:
If anyone is interested, here's what things look like from here for the past 3 days.
dns2:~ wschultz$ gzcat /var/log/named.log.01262009.gz |awk '/\.\/NS\/IN.*denied/{print $6}' |sed -e 's/#.*//g' |sort |uniq -c |sort -n
6 150.69.136.10
1387 76.9.16.171
2759 63.217.28.226
98680 206.71.158.30
dns2:~ wschultz$ gzcat /var/log/named.log.01272009.gz |awk '/\.\/NS\/IN.*denied/{print $6}' |sed -e 's/#.*//g' |sort |uniq -c |sort -n
6 150.69.136.10
1387 76.9.16.171
2753 63.217.28.226
5521 206.71.158.30
dns2:~ wschultz$ cat /var/log/named.log |awk '/\.\/NS\/IN.*denied/{print $6}' |sed -e 's/#.*//g' |sort |uniq -c |sort -n
2 150.69.136.10
279 67.192.144.0
296 76.9.16.171
6519 64.57.246.123
17207 64.57.246.146
20646 70.86.80.98
-wil