Mega DOS tomorrow?

Thu Aug 26 15:47:46 UTC 2004

--On onsdag 25 augusti 2004 14.53 -0400 Andy Dills <andy at xecu.net> wrote:

> So, slashdot is linking to some news sites that are reporting that
> Aleksandr Gostev from Kapersky Labs in Russia has predicted that a large
> chunk of the net will be shut down tomorrow.

FWIW, we (Nordunet/Sunet) today saw one of the larger dDoS attacks we've
seen so far in our end of the net, totaling around 2MPPS toward a single
host. It was coordinated, wery well-spread (came in through both transit
providers at equal balance, and almost as much over the REN connection
towards the rest of Europe and some spillage over private peers.) and
persistent. We've had to deploy several layers of null0 routes to fight it,
(our transit providers have been very helpful, btw.) but service to
anything except the attacked host has not been affected much.  

Them tax-financed OC192's come in handy at times ;-) 

-- 
Måns Nilsson         Systems Specialist
+46 70 681 7204         KTHNOC
                        MN1334-RIPE
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 186 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20040826/388568f8/attachment.sig>