North Korea's negligible Internet connectivity appears to have faltered. First spotted by Internet performance management firm Dyn Research, North Korean routers have been inaccessible, and its scant IP allocation—just 1024 addresses—appears to be offline.
Arbor Networks reports that North Korean systems have been sporadically under attack for several weeks, and that a sustained attack started earlier today. The attacks appear to be a mix of Network Time Protocol (NTP) and Simple Service Discovery Protocol (SSDP) amplification attacks, that allow attackers even with modest resources to generate large floods of traffic.
Arbor's analysis suggests that the volume of traffic itself is not considerable; it peaked at just shy of 6Gbps on 20th December. That such a trickle of traffic is able to knock North Korea offline is testament to the country's virtually non-existent infrastructure. All of North Korea's Internet traffic passes through a peering connection with China Unicom; it's not known what the bandwidth of the connection is, but it's almost certainly less than 10Gbps. And almost all of the network within North Korea is restricted to the capital city, Pyongyang.
North Korea drops off the Internet in suspected DDoS attack
North Korea's leading IT expert Som Tin Wong said he couldn’t comment for fear of being shot