[dns-operations] DNS ANY requests from Amazon?

Paul Vixie paul at redbarn.org
Mon Dec 17 19:09:44 UTC 2012


On 2012-12-17 7:02 PM, Chris Adams wrote:
> I'm seeing a bunch of DNS ANY requests to my authoritative servers with
> Amazon EC2 source IPs.  I guess somebody is now trying to run an
> amplification attack against Amazon?
>
> This is the first time I've seen Amazon targeted this way; are others
> seeing this (am I just late to the party)?

it's happened before. can you share the addresses? and are you using
some form of ratelimiting?

paul

-- 
"It seems like the rules for automagic completion of incomplete names typed into browsers are going to start to look like those for the game of fizbin." --rick jones




More information about the dns-operations mailing list