[182514] in North American Network Operators' Group
Re: 20-30Gbps UDP 1720 traffic appearing to originate from CN in last
daemon@ATHENA.MIT.EDU (Colin Johnston)
Mon Jul 20 14:04:36 2015
X-Original-To: nanog@nanog.org
In-Reply-To: <9a31dd85f5814c739dcebcdf3c80cb3c@EXCHANGE2K13.thenap.com>
From: Colin Johnston <colinj@gt86car.org.uk>
Date: Mon, 20 Jul 2015 19:04:27 +0100
To: Drew Weaver <drew.weaver@thenap.com>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
route block china range whole of and/or firewall block china range whole of
then contact gov and tell them trade talks need to involve china engaging wi=
th incident teams and abuse teams
colin
Sent from my iPhone
> On 20 Jul 2015, at 16:57, Drew Weaver <drew.weaver@thenap.com> wrote:
>=20
> Has anyone else seen a massive amount of illegitimate UDP 1720 traffic com=
ing from China being sent towards IP addresses which provide VoIP services?
>=20
> I'm talking in the 20-30Gbps range?
>=20
> The first incident was yesterday at around 13:00 EST, the second incident w=
as today at 09:00 EST.
>=20
> I'm assuming this is just another DDoS like all others, but I would be int=
erested to hear if I am not the only one seeing this.
>=20
> On list or off-list is fine.
>=20
> Thanks,
> -Drew
>=20
