Dyn blog post has some recommendations for IXPs who may experience bad actors