[90139] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Multi ISP DDOS

daemon@ATHENA.MIT.EDU (Richard A Steenbergen)
Tue May 2 22:11:55 2006

Date: Tue, 2 May 2006 22:11:23 -0400
From: Richard A Steenbergen <ras@e-gerbil.net>
To: Tim Pozar <pozar@lns.com>
Cc: nanog@merit.edu
In-Reply-To: <44580A1B.9050305@lns.com>
Errors-To: owner-nanog@merit.edu


On Tue, May 02, 2006 at 06:40:43PM -0700, Tim Pozar wrote:
> UL is seeing a large DDOS coming towards a couple of customers of ours.
>  I know that other ISPs have been affected as well.  I will let them
> identify them selves.
> 
> Anyone have any scoop on this?

A) I don't think anyone knows who UL is by that reference alone (I assume 
   you mean united layer).

B) The DoS target is Livejournal.

C) As an upstream of an upstream of LJ I'm barely seeing 150Mbps or so of 
   it. No indications of exactly how big it is by the time it hits them, 
   but at least from my perspective it doesn't seem like a huge attack.

Hope it stops soon though, a sustained livejournal outage is probably 
grounds for at least 4-5 suicides by distraught teenagers who can't blog 
about their day. :)

-- 
Richard A Steenbergen <ras@e-gerbil.net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)

home help back first fref pref prev next nref lref last post