Turkey .tr domains un-resolvable over IPv4 ?

Jared Mauch jared at puck.nether.net
Tue Dec 15 01:56:28 UTC 2015


I was told this was done due to a DDoS attack that originated outside turkey.  I have been unable to locate someone with enough details that they could be assisted to bring this back online.  We did look into traffic patterns on-network and saw attack traffic prior to the routes going away but without a route it’s much harder to assist.

Anyone at nic.tr or RIPE that has been working this is welcome to contact me off-list for assistance.

I’m actually quite surprised it took so many hours to make NANOG, and hasn’t yet made the DNS-operations list.

- Jared

> On Dec 14, 2015, at 8:33 AM, Francesco Ciocchetti <fciocchetti at mintel.com> wrote:
> 
> Is anyone seeing the same ?
> 
> I am only able to reach any of the
> 
> tr.                     172800  IN      NS      ns2.nic.tr.
> tr.                     172800  IN      NS      ns4.nic.tr.
> tr.                     172800  IN      NS      ns5.nic.tr.
> tr.                     172800  IN      NS      ns1.nic.tr.
> tr.                     172800  IN      NS      ns3.nic.tr.
> 
> over IPv6 right now ,
> 
> Short time ago traceroute was showing routing loops for ipv4 - www.nic.tr
> 
> * 27. 144.122.1.21                              91.7%    12  351.2 351.2
> 351.2 351.2   0.0*
> * 28. ??                                        100.0    12    0.0   0.0
> 0.0   0.0   0.0*
> * 29. 144.122.1.21                              90.0%    10  336.2 336.2
> 336.2 336.2   0.0*
> * 30. 144.122.1.22                              88.9%     9  159.9 159.9
> 159.9 159.9   0.0*
> 
> same for ns1.nic.tr : 144.122.95.51
> 
> 
> Francesco Ciocchetti
> 
> -- 
> 
> Mintel Group Ltd | 11 Pilgrim Street | London | EC4V 6RN
> Registered in England: Number 1475918. | VAT Number: GB 232 9342 72
> 
> Contact details for our other offices can be found at 
> http://www.mintel.com/office-locations.
> 
> This email and any attachments may include content that is confidential, 
> privileged 
> or otherwise protected under applicable law. Unauthorised disclosure, 
> copying, distribution 
> or use of the contents is prohibited and may be unlawful. If you have 
> received this email in error,
> including without appropriate authorisation, then please reply to the 
> sender about the error 
> and delete this email and any attachments.




More information about the NANOG mailing list