nanog mailing list archives

Recent DNS attacks from China?


From: Leland Vandervort <leland () taranta discpro org>
Date: Wed, 30 Nov 2011 17:32:18 +0100


Hi All, 

I am wondering if anyone else is seeing a sudden increase in DNS attacks emanating from chinese IP addresses?  Over the 
past 24 hours we've seen a sudden rash of chinese IPs attacking our DNS servers in the order of 5 to 10 million PPS for 
periods of 5 to 10 mins, repeated every 20 to 30 minutes.

This anomalous traffic started roughly 24 hours ago, and while we've had occasions of anomalous chinese traffic, never 
anything of this type.

Anyone else?


Regards, 


Leland




Current thread: