handling ddos attacks

Tim Wilde twilde at dyndns.org
Fri May 21 02:10:31 UTC 2004

On Thu, 20 May 2004, P.Schroebel wrote:

> Ok, I 'll buy that right now; we have a DDoS Attack on our core nameservers
> from Where do we start, do I call the police in Bellingham or
> Washington State Police. We have blocked their ips but, we know they will
> come in another way.

Call your local branch of the US Secret Service, if you're in the states,
and ask for their electronic crimes division.  If you're not in the
states, contact your comprable local authority.  They can work with you to
coordinate with other jurisdictions, etc.

You may have some luck directly with the local police at the point of
origin, but it generally helps to have a broader agency involved to
coordinate matters.

Tim Wilde
twilde at dyndns.org
Systems Administrator
Dynamic Network Services, Inc.

More information about the NANOG mailing list