Multi ISP DDOS

Wed May 3 02:27:57 UTC 2006

Richard A Steenbergen wrote:
> On Tue, May 02, 2006 at 06:40:43PM -0700, Tim Pozar wrote:
> 
>>UL is seeing a large DDOS coming towards a couple of customers of ours.
>> I know that other ISPs have been affected as well.  I will let them
>>identify them selves.
>>
>>Anyone have any scoop on this?
> 
> 
> A) I don't think anyone knows who UL is by that reference alone (I assume 
>    you mean united layer).
> 
> B) The DoS target is Livejournal.
> 
> C) As an upstream of an upstream of LJ I'm barely seeing 150Mbps or so of 
>    it. No indications of exactly how big it is by the time it hits them, 
>    but at least from my perspective it doesn't seem like a huge attack.
> 
> Hope it stops soon though, a sustained livejournal outage is probably 
> grounds for at least 4-5 suicides by distraught teenagers who can't blog 
> about their day. :)
> 

Ya... I have been chatting with the folks at SixApart about this.  This
is one of the folks attacked.  It looks like there may have been others.

Tim
-- 
1978 45th Ave / San Francisco CA 94116 / USA // POTS: +1 415 665 3790
 GPG Fingerprint: 4821 CFDA 06E7 49F3 BF05  3F02 11E3 390F 8338 5B04
                Life is playful - Ben Olizar
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pozar.vcf
Type: text/x-vcard
Size: 413 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20060502/e867e25e/attachment.vcf>