[186315] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Ransom DDoS attack - need help!

daemon@ATHENA.MIT.EDU (Roland Dobbins)
Wed Dec 9 20:28:48 2015

X-Original-To: nanog@nanog.org
From: "Roland Dobbins" <rdobbins@arbor.net>
To: nanog@nanog.org
Date: Thu, 10 Dec 2015 08:28:41 +0700
In-Reply-To: <CAKDS_tnZysQSQfoQve3X78FB5cO8HgD=jfFWBt1wz=ySrsxbsw@mail.gmail.com>
Errors-To: nanog-bounces@nanog.org

On 8 Dec 2015, at 14:24, Joe Morgan wrote:

> At the point in time we blackholed our ip we were seeing 20+Gbps.

These two presos discuss extortion DDoS and UDP reflection/amplification 
attacks, specifically - it isn't necessary to resort to D/RTBH to deal 
with these attacks:

<https://app.box.com/s/776tkb82634ewvzvp26nnout6v4ij39q>

<https://app.box.com/s/r7an1moswtc7ce58f8gg>

-----------------------------------
Roland Dobbins <rdobbins@arbor.net>

home help back first fref pref prev next nref lref last post