[60066] in North American Network Operators' Group
Re: WANTED: ISPs with DDoS defense solutions
daemon@ATHENA.MIT.EDU (variable@ednet.co.uk)
Thu Jul 31 09:19:32 2003
Date: Thu, 31 Jul 2003 14:17:30 +0100 (BST)
From: variable@ednet.co.uk
To: Rob Thomas <robt@cymru.com>
Cc: NANOG <nanog@merit.edu>
In-Reply-To: <ROTMAILER.0307301932240.10923-100000@dragon.sauron.net>
Errors-To: owner-nanog-outgoing@merit.edu
On Wed, 30 Jul 2003, Rob Thomas wrote:
> I've tracked 1787 DDoS attacks since 01 JAN 2003. Of that number,
> only 32 used spoofed sources. I rarely see spoofed attacks now.
Do you have any ideas as to why that is? Is it due to more providers
doing source filtering? It wouldn't make sense for attackers to become
less sophisticated unless they became more difficult to catch for other
reasons (e.g. botnets getting bigger).
Rich
