[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Recent DNS attacks from China?

Subject: Recent DNS attacks from China?
From: leland at taranta.discpro.org (Leland Vandervort)
Date: Wed, 30 Nov 2011 17:32:18 +0100

Hi All, 

I am wondering if anyone else is seeing a sudden increase in DNS attacks emanating from chinese IP addresses?  Over the past 24 hours we've seen a sudden rash of chinese IPs attacking our DNS servers in the order of 5 to 10 million PPS for periods of 5 to 10 mins, repeated every 20 to 30 minutes.

This anomalous traffic started roughly 24 hours ago, and while we've had occasions of anomalous chinese traffic, never anything of this type.

Anyone else?


Regards, 


Leland

Follow-Ups:
- Recent DNS attacks from China?
  - From: drais at icantclick.org (david raistrick)
- Recent DNS attacks from China?
  - From: cmadams at hiwaay.net (Chris Adams)
- Recent DNS attacks from China?
  - From: andrew.wallace at rocketmail.com (andrew.wallace)

Prev by Date: IPv6 prefixes longer then /64: are they possible in DOCSIS networks?
Next by Date: IPv6 prefixes longer then /64: are they possible in DOCSIS networks?
Previous by thread: IPv6 version of www.qwest.com/www.centurylink.com has been down for 10 days
Next by thread: Recent DNS attacks from China?
Index(es):
- Date
- Thread