[dns-operations] s3.amazonaws.com problem?

[Greg Choules]

Hi Jim.
You get the first response prize :)
Queries have been originating from all kinds of mobile clients.

It appears that Amazon are blocking queries of type CNAME. I'm guessing
because they have identified these are the basis of the attack.
According to our stats, this is very definitely not over yet.

cheers, Greg

On Wed, 23 Oct 2019 at 09:43, Jim Reid <jim at rfc1035.com> wrote:

>
>
> > On 23 Oct 2019, at 09:25, Greg Choules via dns-operations <
> dns-operations at dns-oarc.net> wrote:
> >
> > Is anyone else experiencing resolution issues for names in this domain?
> We are seeing a lot of queries of the form:
> > CNAME? bvusfvyq.s3.amazonaws.com
> > (the label before ".s3" looks random) and a lot of SERVFAIL responses.
> >
> > Any clues would be appreciated.
>
> If you believe The Register (I know, I know...) Amazon’s DNS
> infrastructure is/was the target of a DDoS attack.
>         https://www.theregister.co.uk/2019/10/22/aws_dns_ddos/
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20191023/b4af910d/attachment.html>