[dns-operations] Abnormal activity fron chinanet?

[Christopher J. Pilkington]

On Fri, Dec 2, 2011 at 12:56 PM, David Conrad <drc at virtualized.org> wrote:
> Can you provide contact information for CNCERT?
>
> The multi-Gbps DoS attempts from China are getting tiresome.

...and...

On Dec 2, 2011, at 9:51 AM, Keith Mitchell wrote:
> Experience with similar incidents in the past suggests it is probably
> worth contacting the CNCERT folks about this, who will hopefully be able
> to reach out to the ISP.

If these are spoofed ANY requests, it's likely amplification, which
would imply the .cn hosts are target, not source.

-cjp