Re:Fox-IT hit by cyber attack
by breakingcups on Friday December 15, 2017 @06:50AM
(#15931173)
Another way could be to monitor the number of unique IP addresses connecting? That will get harder with IPV6, where you'll probably want to do it on subnet level.
Also, automated DNS monitoring could work too.