[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

20-30Gbps UDP 1720 traffic appearing to originate from CN in last 24 hours

Subject: 20-30Gbps UDP 1720 traffic appearing to originate from CN in last 24 hours
From: drew.weaver at thenap.com (Drew Weaver)
Date: Mon, 20 Jul 2015 15:57:14 +0000

Has anyone else seen a massive amount of illegitimate UDP 1720 traffic coming from China being sent towards IP addresses which provide VoIP services?

I'm talking in the 20-30Gbps range?

The first incident was yesterday at around 13:00 EST, the second incident was today at 09:00 EST.

I'm assuming this is just another DDoS like all others, but I would be interested to hear if I am not the only one seeing this.

On list or off-list is fine.

Thanks,
-Drew

Follow-Ups:
- 20-30Gbps UDP 1720 traffic appearing to originate from CN in last 24 hours
  - From: jared at puck.nether.net (Jared Mauch)
- 20-30Gbps UDP 1720 traffic appearing to originate from CN in last 24 hours
  - From: colinj at gt86car.org.uk (Colin Johnston)
- 20-30Gbps UDP 1720 traffic appearing to originate from CN in last 24 hours
  - From: cb.list6 at gmail.com (Ca By)

Prev by Date: SEC webpages inaccessible due to Firefox blocking servers with weak DH ciphers
Next by Date: 20-30Gbps UDP 1720 traffic appearing to originate from CN in last 24 hours
Previous by thread: SIP trunking providers
Next by thread: 20-30Gbps UDP 1720 traffic appearing to originate from CN in last 24 hours
Index(es):
- Date
- Thread