[186380] in North American Network Operators' Group
Re: Turkey .tr domains un-resolvable over IPv4 ?
daemon@ATHENA.MIT.EDU (Jared Mauch)
Mon Dec 14 21:06:26 2015
X-Original-To: nanog@nanog.org
From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <CAMfY69n8gP2PoOmKBkga6P_SWWgVvz7-wdgqccgXJxcRJFxZKw@mail.gmail.com>
Date: Mon, 14 Dec 2015 20:56:28 -0500
To: Francesco Ciocchetti <fciocchetti@mintel.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org
I was told this was done due to a DDoS attack that originated outside =
turkey. I have been unable to locate someone with enough details that =
they could be assisted to bring this back online. We did look into =
traffic patterns on-network and saw attack traffic prior to the routes =
going away but without a route it=E2=80=99s much harder to assist.
Anyone at nic.tr or RIPE that has been working this is welcome to =
contact me off-list for assistance.
I=E2=80=99m actually quite surprised it took so many hours to make =
NANOG, and hasn=E2=80=99t yet made the DNS-operations list.
- Jared
> On Dec 14, 2015, at 8:33 AM, Francesco Ciocchetti =
<fciocchetti@mintel.com> wrote:
>=20
> Is anyone seeing the same ?
>=20
> I am only able to reach any of the
>=20
> tr. 172800 IN NS ns2.nic.tr.
> tr. 172800 IN NS ns4.nic.tr.
> tr. 172800 IN NS ns5.nic.tr.
> tr. 172800 IN NS ns1.nic.tr.
> tr. 172800 IN NS ns3.nic.tr.
>=20
> over IPv6 right now ,
>=20
> Short time ago traceroute was showing routing loops for ipv4 - =
www.nic.tr
>=20
> * 27. 144.122.1.21 91.7% 12 351.2 =
351.2
> 351.2 351.2 0.0*
> * 28. ?? 100.0 12 0.0 =
0.0
> 0.0 0.0 0.0*
> * 29. 144.122.1.21 90.0% 10 336.2 =
336.2
> 336.2 336.2 0.0*
> * 30. 144.122.1.22 88.9% 9 159.9 =
159.9
> 159.9 159.9 0.0*
>=20
> same for ns1.nic.tr : 144.122.95.51
>=20
>=20
> Francesco Ciocchetti
>=20
> --=20
>=20
> Mintel Group Ltd | 11 Pilgrim Street | London | EC4V 6RN
> Registered in England: Number 1475918. | VAT Number: GB 232 9342 72
>=20
> Contact details for our other offices can be found at=20
> http://www.mintel.com/office-locations.
>=20
> This email and any attachments may include content that is =
confidential,=20
> privileged=20
> or otherwise protected under applicable law. Unauthorised disclosure,=20=
> copying, distribution=20
> or use of the contents is prohibited and may be unlawful. If you have=20=
> received this email in error,
> including without appropriate authorisation, then please reply to the=20=
> sender about the error=20
> and delete this email and any attachments.
