20-30Gbps UDP 1720 traffic appearing to originate from CN in last 24 hours

Mon Jul 20 18:04:27 UTC 2015

route block china range whole of and/or firewall block china range whole of

then contact gov and tell them trade talks need to involve china engaging with incident teams and abuse teams

colin
Sent from my iPhone

> On 20 Jul 2015, at 16:57, Drew Weaver <drew.weaver at thenap.com> wrote:
> 
> Has anyone else seen a massive amount of illegitimate UDP 1720 traffic coming from China being sent towards IP addresses which provide VoIP services?
> 
> I'm talking in the 20-30Gbps range?
> 
> The first incident was yesterday at around 13:00 EST, the second incident was today at 09:00 EST.
> 
> I'm assuming this is just another DDoS like all others, but I would be interested to hear if I am not the only one seeing this.
> 
> On list or off-list is fine.
> 
> Thanks,
> -Drew
>