I'm under attack.
I'm under attack.
It's uncommon for me to receive many requests, so I think flagging several from one IP could be a good idea.
Someone else had an unexpected incident at their home server too.
Consider using a pfSense router and set up Snort. You notice repeated alerts saying "PROTOCOL-DNS DNS query amplification attempt." It might even automatically stop bad IP addresses.