topic UDP Flood Attack from China in Archive

UDP Flood Attack from China

MJH — Wed, 25 Jan 2012 23:00:16 GMT

Hi,

I have a static IP address and for a while I've noticed that the Internet performance has dropped.

Tonight I set my firewall to alert me to any ICMP or UDP flood attacks and sure enough my IP address is being constantly attacked by a UDP flood on port 5060 from an IP address in China.

I guess there are two options to resolve this. I either ask BT for a new static ip address or ask if they will blacklist this specific IP address?

Does anyone have experience of this? Will BT blacklist an attacking IP address (which could benefit their customers) or is it easier to move to a new static ip?

Thanks

Re: UDP Flood Attack from China

MHC — Thu, 26 Jan 2012 10:00:25 GMT

Make sure you call the Tech Helpdesk and report it. And as for feedback.

I would hope that once several reports are received BT can block that IP address and others related to it.

A new static might be easier, but getting the source barrred is essential too.

Re: UDP Flood Attack from China

MJH — Thu, 26 Jan 2012 19:18:37 GMT

Well, once I got past the automated call attendent it was all plain sailing. ("UDF Flood?")

Very helpful tech support staff (UK based ) who understood the problem immediately, took details of the offending IP address and even called me back later to confirm that it was now blocked.

Excellent work BT. All sorted with one phone call.

Cheers.