[dns-operations] ANONS reflection attack?

sthaug at nethelp.no sthaug at nethelp.no
Fri Sep 14 13:56:11 UTC 2012

> In  an ISP  network that I am taking care of in my spare time, we are seeing lots of TXT requests for "ki.ro.lt" to some open recursive nameservers (which we are trying to shot down, but that's not so easy with dnsmasq and distributed Wi-Fi boxes)
> Are you seeing similar attacks at the moment?

Saw quite a bit of it earlier today - spoofed source amplification
attacks directed at and

Steinar Haug, Nethelp consulting, sthaug at nethelp.no

More information about the dns-operations mailing list