<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Not an official club, but the unofficial club is full of members including myself unfortunately<span id="🙁">🙁...</span>little you can do except consider DDoS mitigation service if it continues. </div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
It is a criminal activity, so you can report the attack to the FBI...they can't do much to be honest, but at the very least this is good to do in case the problem continues and/or you need to file a business loss with your insurance company barring you have
 Cyber insurance in your policy. </div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<a href="https://www.ic3.gov/Media/Y2017/PSA1710172" id="LPlnk">https://www.ic3.gov/Media/Y2017/PSA1710172</a><br>
</div>
<div class="_Entity _EType_OWALinkPreview _EId_OWALinkPreview _EReadonly_1">
<div id="LPBorder_GTaHR0cHM6Ly93d3cuaWMzLmdvdi9NZWRpYS9ZMjAxNy9QU0ExNzEwMTcy" class="LPBorder898876" style="width: 100%; margin-top: 16px; margin-bottom: 16px; max-width: 800px; min-width: 424px; position: relative;">
<table id="LPContainer898876" role="presentation" style="padding:12px 36px 12px 12px; width:100%; border-width:1px; border-style:solid; border-color:rgb(200,200,200); border-radius:2px">
<tbody>
<tr valign="top" style="border-spacing:0px">
<td style="width:100%">
<div id="LPTitle898876" style="font-size:21px; font-weight:300; margin-right:8px; font-family:wf_segoe-ui_light,"Segoe UI Light","Segoe WP Light","Segoe UI","Segoe WP",Tahoma,Arial,sans-serif; margin-bottom:12px">
<a target="_blank" id="LPUrlAnchor898876" href="https://www.ic3.gov/Media/Y2017/PSA1710172" style="text-decoration:none">Internet Crime Complaint Center (IC3) | Booter and Stresser Services Increase the Scale and Frequency of Distributed Denial of Service Attacks</a></div>
<div id="LPDescription898876" style="font-size:14px; max-height:100px; color:rgb(102,102,102); font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif; margin-bottom:12px; margin-right:8px; overflow:hidden">
Booter and Stresser Services Increase the Scale and Frequency of Distributed Denial of Service Attacks Criminal actors offer distributed denial of service (DDoS)-for-hire services in criminal forums and marketplaces.</div>
<div id="LPMetadata898876" style="font-size:14px; font-weight:400; color:rgb(166,166,166); font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif">
www.ic3.gov</div>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<br>
<div id="appendonsend"></div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> NANOG <nanog-bounces+bclark=peregrinenetworks.net@nanog.org> on behalf of Mike Hammett <nanog@ics-il.net><br>
<b>Sent:</b> Monday, February 8, 2021 6:46 AM<br>
<b>To:</b> NANOG list <nanog@nanog.org><br>
<b>Subject:</b> Retalitory DDoS</font>
<div> </div>
</div>
<div>
<div style="font-family:arial,helvetica,sans-serif; font-size:10pt; color:#000000">
<div><span style="font-family:arial,helvetica,sans-serif; font-size:13.3333px; background-color:rgb(255,255,255)">Is there a club for people that have been DDoSed? If so, count me in.</span>
<div style="font-family:arial,helvetica,sans-serif; font-size:13.3333px; background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:arial,helvetica,sans-serif; font-size:13.3333px; background-color:rgb(255,255,255)">
This one was directed at me (as opposed to one of my customers) because I got an e-mail explaining why I was getting DDoSed. Is that aspect common?</div>
<div style="font-family:arial,helvetica,sans-serif; font-size:13.3333px; background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:arial,helvetica,sans-serif; font-size:13.3333px; background-color:rgb(255,255,255)">
There were also some racial and sexual accusations that were made that clearly aren't true and just speak to the intelligence of people like this.</div>
<div style="font-family:arial,helvetica,sans-serif; font-size:13.3333px; background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:arial,helvetica,sans-serif; font-size:13.3333px; background-color:rgb(255,255,255)">
Is it safe to assume that they completely anonymized the email they sent to me?</div>
<div style="font-family:arial,helvetica,sans-serif; font-size:13.3333px; background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:arial,helvetica,sans-serif; font-size:13.3333px; background-color:rgb(255,255,255)">
Is there anyone I should be reporting this to?</div>
<div style="font-family:arial,helvetica,sans-serif; font-size:13.3333px; background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:arial,helvetica,sans-serif; font-size:13.3333px; background-color:rgb(255,255,255)">
I thought my site was running in Cloudflare, but my individual server was still attacked, so I gotta figure out where I screwed that up.</div>
</div>
<font face="arial, helvetica, sans-serif"><span style="font-size:13.3333px">
<div><font face="arial, helvetica, sans-serif"><span style="font-size:13.3333px"><br>
</span></font></div>
<div><font face="arial, helvetica, sans-serif"><span style="font-size:13.3333px"><br>
</span></font></div>
https://www.dropbox.com/s/rrrx90jvy09h26s/ICS%20DDoS.png?dl=0</span></font><br>
<br>
<div style="color:rgb(0,0,0); font-family:arial,helvetica,sans-serif; font-size:10pt">
<span name="x_x"></span><br style="color:rgb(0 ,0 ,0); font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px">
<br style="color:rgb(0 ,0 ,0); font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px">
<span style="color:rgb(0 ,0 ,0); font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; display:inline!important; float:none">-----</span><br style="color:rgb(0 ,0 ,0); font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px">
<span style="color:rgb(0 ,0 ,0); font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px; display:inline!important; float:none">Mike
 Hammett</span><br style="color:rgb(0 ,0 ,0); font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px">
<a href="http://www.ics-il.com/" target="_blank" rel="nofollow noopener noreferrer" style="font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px">Intelligent
 Computing Solutions</a><br style="color:rgb(0 ,0 ,0); font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px">
<a href="https://www.facebook.com/ICSIL" target="_blank" rel="nofollow noopener noreferrer" style="font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px"><img style="border:0pt none" src="http://www.ics-il.com/images/fbicon.png"></a><a href="https://plus.google.com/+IntelligentComputingSolutionsDeKalb" target="_blank" rel="nofollow noopener noreferrer" style="font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px"><img style="border:0pt none" src="http://www.ics-il.com/images/googleicon.png"></a><a href="https://www.linkedin.com/company/intelligent-computing-solutions" target="_blank" rel="nofollow noopener noreferrer" style="font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px"><img style="border:0pt none" src="http://www.ics-il.com/images/linkedinicon.png"></a><a href="https://twitter.com/ICSIL" target="_blank" rel="nofollow noopener noreferrer" style="font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px"><img style="border:0pt none" src="http://www.ics-il.com/images/twittericon.png"></a><br style="color:rgb(0 ,0 ,0); font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px">
<a href="http://www.midwest-ix.com/" target="_blank" rel="nofollow noopener noreferrer" style="font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px">Midwest
 Internet Exchange</a><br style="color:rgb(0 ,0 ,0); font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px">
<a href="https://www.facebook.com/mdwestix" target="_blank" rel="nofollow noopener noreferrer" style="font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px"><img style="border:0pt none" src="http://www.ics-il.com/images/fbicon.png"></a><a href="https://www.linkedin.com/company/midwest-internet-exchange" target="_blank" rel="nofollow noopener noreferrer" style="font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px"><img style="border:0pt none" src="http://www.ics-il.com/images/linkedinicon.png"></a><a href="https://twitter.com/mdwestix" target="_blank" rel="nofollow noopener noreferrer" style="font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px"><img style="border:0pt none" src="http://www.ics-il.com/images/twittericon.png"></a><br style="color:rgb(0 ,0 ,0); font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px">
<a href="http://www.thebrotherswisp.com/" target="_blank" rel="nofollow noopener noreferrer" style="font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px">The
 Brothers WISP</a><br style="color:rgb(0 ,0 ,0); font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px">
<a href="https://www.facebook.com/thebrotherswisp" target="_blank" rel="nofollow noopener noreferrer" style="font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px"><img style="border:0pt none" src="http://www.ics-il.com/images/fbicon.png"></a><a href="https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg" target="_blank" rel="nofollow noopener noreferrer" style="font-family:'times new roman'; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; text-indent:0px; text-transform:none; white-space:normal; word-spacing:0px"><img style="border:0pt none" src="http://www.ics-il.com/images/youtubeicon.png"></a><span name="x_x"></span><br>
</div>
</div>
</div>
</body>
</html>