Ask HN: DDoS Attacks from Cloudflair and Google IPs

7 pointssschueller1 comment

We are getting burst of DDOS attacks for the last few days against our DNS coming from thousands of hosts with the bulk from Google and Cloudflare. Is there an easier way to submit abuse reports than filling out the online forms every time? Is there some standard or service where abuse reports can be submitted the many providers at once?

View on HN

DNS DDoS is usually spoofed requests to real servers, then the real servers send back a response to the target.

It's not clear from your post if you're getting the requests or the responses?

If you're getting the requests, the source addresses are spoofed and abuse contacts for the source IPs won't help. You need to rate limit your responses so you're not a good reflector and the abuse will stop, mostly. If you have good relations with your transit providers, you can maybe try to get them to try to track the source of the traffic, but if you had that kind of pull, you probably wouldn't ask here.

If you're getting DNS replies for questions you didn't ask, abuse contacts should help... But I wouldn't expect much unless the rates are really high.

Reply on news.ycombinator.com