I don't think it is over. If it was over I would be back to four DNS servers. I still have 248 DNS servers.
Why does the having the extra capacity available mean the attacks are NOT over? Just because the attach went away doesn't mean the network change to improve performance and capacity had to.
Beyond going after the attackers and shutting them down, it seems TWC beefed up their DNS capacity to handle a lot more DNS requests at once making a DNS DDoS alot harder to do.
Weren't users complaining of poor DNS performance BEFORE these attacks started anyway? This solution probably solved much of that too.
Now if they could only move them pack to Orange so my query time is 10-15ms instead of 80+.
