Recent DNS attacks from China?

rob.vercouteren · November 30, 2011, 4:59pm

Hello Leland,

Yes we do see the same behavior!

regards,
Rob Vercouteren

Hammer · November 30, 2011, 5:13pm

There was a new BIND vulnerability announced...

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4313

-Hammer-

"I was a normal American nerd"
-Jack Herer

David_Conrad3 · November 30, 2011, 5:40pm

I strongly suspect the BIND vulnerability is unrelated. These attacks appear to be simple (if large) DDoSes.

Regards,
-drc

Hammer · November 30, 2011, 5:43pm

Just offering it up. It's not a 0day or anything but it is recently published. I am not receiving the DoS so I haven't had a chance to observe the traffic.

-Hammer-

"I was a normal American nerd"
-Jack Herer