Attack has been mitigated.

Over the last few days, we received unusual amounts of plain DNS TXT requests from all sorts of IPs that looks like originating from Brazil. We disabled UDP port 53 until a permanent fix was found. Now it is all operational but all Brazilian IPs are banned from DNS. DoH/DoT wasn't affected.