How to block unidentified domain requests to Amazon Route 53?

Question

Recently, saw a huge spike in the Route 53 queries for unidentified domain names. Looks like some scan tools query not existing domain which is hosted on Amazon Route 53 public host zone. For example, they query abc.abcde.<company>.com. The request amount over 1 billion and we have to pay extra.

How do I stop this from happening?

Answer

Hi Yoga,

I believe you want to to block unidentified domain requests to Amazon Route 53, you need to enable privacy protection for a domain that you registered using Route 53.

•	Sign in to the AWS Management Console and open the Route 53 console [1]

•	 In the navigation pane, choose Registered Domains.

•	Choose the name of the domain that you want to enable or disable privacy protection for.

•	Choose Edit Contacts.

•	Choose whether to hide contact information. You must specify the same privacy setting for all three contacts: administrative, registrant, and technical.

•	Choose Save.

Refer to References

[1] https://console.aws.amazon.com/route53/

[2] https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-privacy-protection.html

How to block unidentified domain requests to Amazon Route 53?

Relevant content