A DNS reflection attack is a DoS attack that does not target the DNS server to which the requests are sent, but the receiver of the responses. It takes advantage of the fact that certain requests generate a relatively large amount of response data. Here, it is possible to achieve an amplification factor of 100 or higher. This means that the response, measured in bytes, is at least a hundred times larger than the request. Due to the number and size of the responses, the bandwidth of the target network or the receiver’s IT system will become overloaded beyond its capacity. Thus, any technical IT component can be the target of this type of attack. Finally, DNS reflection attacks benefit from open resolvers.