[dns-operations] DNS ANY record queries - Reflection Attacks

Torsten Segner torsten at segner.eu
Wed Sep 12 10:09:28 UTC 2012

Am Wed, 12 Sep 2012 11:36:19 +0200
schrieb Klaus Darilion <klaus.mailinglists at pernau.at>:
> I also wondered if maybe it is just a legitimate user trying to "mirror" 
> the DNS. But todays most seen source on our DNS servers is 
> which is assinged to nexusguard.com which "protects E-Business from DDoS 
> attacks". This makes me believe that it is an amplification attack.

Same here now. Earlier today (between around 1 and 5 am) it's been though.


More information about the dns-operations mailing list