[70962] in North American Network Operators' Group
Re: Real-Time Mitigation of Denial of Service Attacks Now Available
daemon@ATHENA.MIT.EDU (Hank Nussbacher)
Wed Jun 2 14:05:04 2004
Date: Wed, 2 Jun 2004 21:03:42 +0300 (IDT)
From: Hank Nussbacher <hank@mail.iucc.ac.il>
To: Andrew - Supernews <andrew@supernews.net>
Cc: nanog@merit.edu
In-Reply-To: <E1BVY45-00028x-Qa@trinity.supernews.net>
Errors-To: owner-nanog-outgoing@merit.edu
We see approximately 60-70 spoofed DDOS attacks per day at our Network
Telescope:
http://noc.ilan.net.il/research/riverhead/
The volume of backscatter we see on our "dark space" /16 is about
50kb/sec:
http://noc.ilan.net.il/stats/TAU-GIGAPOP/riverbsc-gp1.ilan.net.il.html
I have no way of proving it but I assume we see only 10% of the daily DDOS
attacks that take place on the Internet since as you state - most of the
attacks these days are from "100% valid and accurate source IP addresses".
-Hank
> The majority of the DDoS traffic that's been received here over the
> past year has had 100% valid and accurate source IP addresses.
>
> --
> Andrew, Supernews
> http://www.supernews.com
>
