3 ms·
Who launches these massive DDoS attacks against DNS infrastructure? It would require a substantial botnet to pull off, so they must have some compelling reason.
by alexbecker 12y ago
Who launches these massive DDoS attacks against DNS infrastructure? It would require a substantial botnet to pull off, so they must have some compelling reason. Maybe there's something obvious I'm missing, but I don't see one, except perhaps for a government or large organization which had many competitors using the DNS service they attack.
- zzzcpan 12y agoThere is no requirement in a substantial botnet for this, even a small one will do. Also internet is full of cheap amplified ddos offerings. Attacker could use multiple offerings for more bandwidth if he feels like it. Maybe this is something obvious you are missing.
- gnopgnip 12y agoUntil more orgs implement BCP 38, it only takes a handful of servers with an open resolver to multiply the attackers bandwidth by a factor of 30 or more. UDP does not verify the source IP is the sender. Most of the internet will drop spoofed packets already, but there are still enough netblocks passing spoofed traffic, and vulnerable DNS servers for this to be a concern.