[49623] in North American Network Operators' Group
Re: DOS attack from PANAMSAT
daemon@ATHENA.MIT.EDU (Rob Thomas)
Sat Jul 6 19:25:12 2002
Date: Sat, 6 Jul 2002 18:24:40 -0500 (CDT)
From: Rob Thomas <robt@cymru.com>
To: NANOG <nanog@merit.edu>
In-Reply-To: <3D271E7E.5090603@ghettocolo.com>
Errors-To: owner-nanog-outgoing@merit.edu
Hello, Frank.
] Your upstreams, who will help you back-track. Nobody DoS'es with their
] real IP's anymore.
Hmm, not according to the data I collect. I track numerous botnets and
DoSnets, and a bit over 80% of them use the real IPs as the source of
the floods. Then again, with 500 - 18000 bots, it isn't all that
necessary to mask the source IPs. :/
Just my $.02, of course.
Thanks,
Rob.
--
Rob Thomas
http://www.cymru.com
ASSERT(coffee != empty);
