From 2am (UTC) this morning we've been getting a reflection attack
hitting mostly our node in LU, and a little on the one in RIPE.
Its very easy to spot, its an ANY query for "." (ROOT), and has EDNS0
packet size declared is 9000
Currently its below background noise, but be interested to know if
others are seeing it.
http://stats.cdns.net/public/0.0.0.1/001E68-37CBC9.html
They are hitting pretty much all the IPs we use for hosting ccTLDs, so
we wondered if they were simply going round & round the IPs in the ROOT
zone.
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
