Turkey .tr domains un-resolvable over IPv4 ?
jared at puck.nether.net
Tue Dec 15 01:56:28 UTC 2015
I was told this was done due to a DDoS attack that originated outside turkey. I have been unable to locate someone with enough details that they could be assisted to bring this back online. We did look into traffic patterns on-network and saw attack traffic prior to the routes going away but without a route it’s much harder to assist.
Anyone at nic.tr or RIPE that has been working this is welcome to contact me off-list for assistance.
I’m actually quite surprised it took so many hours to make NANOG, and hasn’t yet made the DNS-operations list.
> On Dec 14, 2015, at 8:33 AM, Francesco Ciocchetti <fciocchetti at mintel.com> wrote:
> Is anyone seeing the same ?
> I am only able to reach any of the
> tr. 172800 IN NS ns2.nic.tr.
> tr. 172800 IN NS ns4.nic.tr.
> tr. 172800 IN NS ns5.nic.tr.
> tr. 172800 IN NS ns1.nic.tr.
> tr. 172800 IN NS ns3.nic.tr.
> over IPv6 right now ,
> Short time ago traceroute was showing routing loops for ipv4 - www.nic.tr
> * 27. 220.127.116.11 91.7% 12 351.2 351.2
> 351.2 351.2 0.0*
> * 28. ?? 100.0 12 0.0 0.0
> 0.0 0.0 0.0*
> * 29. 18.104.22.168 90.0% 10 336.2 336.2
> 336.2 336.2 0.0*
> * 30. 22.214.171.124 88.9% 9 159.9 159.9
> 159.9 159.9 0.0*
> same for ns1.nic.tr : 126.96.36.199
> Francesco Ciocchetti
> Mintel Group Ltd | 11 Pilgrim Street | London | EC4V 6RN
> Registered in England: Number 1475918. | VAT Number: GB 232 9342 72
> Contact details for our other offices can be found at
> This email and any attachments may include content that is confidential,
> or otherwise protected under applicable law. Unauthorised disclosure,
> copying, distribution
> or use of the contents is prohibited and may be unlawful. If you have
> received this email in error,
> including without appropriate authorisation, then please reply to the
> sender about the error
> and delete this email and any attachments.
More information about the NANOG