Our DNS servers possibly being attacked by CF IPs

For over an hour now, our DNS servers have been getting repeatedly queried by CF IPs. Here is a list of several along with the number of queries the server has seen recently from that IP:

3 141.101.70.117 2196 1.1%
4 141.101.70.59 2177 1.1%
5 141.101.70.35 2132 1.1%
6 141.101.70.166 2112 1.1%
7 141.101.70.7 2099 1.0%
8 141.101.70.21 2036 1.0%
9 141.101.70.133 1978 1.0%
10 141.101.70.17 1961 1.0%
11 141.101.70.122 1957 1.0%
12 141.101.70.123 1942 1.0%
13 141.101.70.128 1942 1.0%
14 141.101.70.116 1941 1.0%
15 141.101.70.154 1935 1.0%
16 141.101.106.97 1923 1.0%
17 141.101.70.30 1917 1.0%
18 141.101.70.47 1912 1.0%
19 141.101.106.133 1907 1.0%
20 141.101.106.121 1906 1.0%

There are many more, mostly in the 141.101.70.0/24 range (and others).

This is seriously impacting our site. Please investigate. Contact me directly for more info.

Also, please make it easier to report abuse from CF itself. I could find NO other way to report this abuse.

Thank you.

Hi @user2062, to contact Cloudflare Customer Support, login & go to https://dash.cloudflare.com/?account=support and select get more help from the bottom of the page. If you receive an automated reply, respond back that you still need assistance and please share your ticket number here.

Ticket #1816865.

1 Like

Thank you, I added myself to the ticket and a link to this thread. If you have any of the details the engineer asked about, timestamp, query type and names, those would be helpful. Sorry for the issues.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.