Re: Large DDoS, small extortion

2014-05-23 Thread Frank Doherty
Thanks everyone. There's been a lot of great on and off list responses, and we have a much better list of contacts for the next time this happens. We are in contact with the FBI now (very impressed, particularly compared to what I expected), and have access to resources that we didn't know

Re: Large DDoS, small extortion

2014-05-23 Thread Randy Bush
Thanks everyone. There's been a lot of great on and off list responses, and we have a much better list of contacts for the next time this happens. We are in contact with the FBI now (very impressed, particularly compared to what I expected), and have access to resources that we didn't

Re: Large DDoS, small extortion

2014-05-23 Thread Matthew Petach
On Fri, May 23, 2014 at 1:24 AM, Randy Bush ra...@psg.com wrote: Thanks everyone. There's been a lot of great on and off list responses, and we have a much better list of contacts for the next time this happens. We are in contact with the FBI now (very impressed, particularly

Re: IPv6 at 50% for VZW (Re: NAT IP and Google)

2014-05-23 Thread Geoff Huston
On 23 May 2014, at 3:29 pm, Christopher Morrow morrowc.li...@gmail.com wrote: On Fri, May 23, 2014 at 1:24 AM, Julien Goodwin na...@studio442.com.au wrote: On 23/05/14 11:21, Jared Mauch wrote: You can't cater to everyones broken network. I can't reach 1.1.1.1 from here either, but

Re: Large DDoS, small extortion

2014-05-23 Thread Anne P. Mitchell, Esq.
The FBI is all over this, I was coordinating between the agency and several of those first attacked, for a while, and am still in touch with the agency. There is also a private group of the C-level folks of those orgs that have been attacked, who are talking and sharing amongst themselves.

60 Hudson Equinix

2014-05-23 Thread Gabriel Blanchard
Apologies for asking on this list but we're looking for a very minimal amount of space in Equinix @ 60 Hudson. 2U worth of space tops with only 1A worth of power. Is there anyone here willing to sub-lease space that would be interested? Email me off-list. -Gabe

Re: Large DDoS, small extortion

2014-05-23 Thread Barry Shein
Sure, of course, many of us have. But how is $VICTIM supposed to distinguish the wheat from the chaff without reference to specific cases and results? Some reasonable-sounding suggestions could be counter-productive or even downright dangerous (depending on the nature of the attacker.) Or a

Re: Large DDoS, small extortion

2014-05-23 Thread Roland Dobbins
On May 24, 2014, at 12:13 AM, Barry Shein b...@world.std.com wrote: Some reasonable-sounding suggestions could be counter-productive or even downright dangerous (depending on the nature of the attacker.) Or a waste of time. Sure. Every circumstance is different. But there is *one*

Re: Large DDoS, small extortion

2014-05-23 Thread Barry Shein
On May 24, 2014 at 00:38 rdobb...@arbor.net (Roland Dobbins) wrote: Never, under any circumstances, pay. Not even if you've persuaded the Men from U.N.C.L.E. to help you, and they suggest you pay because they think they can trace the money, do not pay. Ok, you're recommending $VICTIM

Weekly Routing Table Report

2014-05-23 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to

Re: Large DDoS, small extortion

2014-05-23 Thread Roland Dobbins
On May 24, 2014, at 1:09 AM, Barry Shein b...@world.std.com wrote: What is this based on other than your subsequent common sense reasoning? (directly below) I've been involved in helping people who've paid. It didn't turn out well (obviously, or they wouldn't need help, heh). By

Re: Large DDoS, small extortion

2014-05-23 Thread Merike Kaeo
On May 23, 2014, at 1:24 AM, Randy Bush ra...@psg.com wrote: Thanks everyone. There's been a lot of great on and off list responses, and we have a much better list of contacts for the next time this happens. We are in contact with the FBI now (very impressed, particularly compared to

Re: IPv6 at 50% for VZW (Re: NAT IP and Google)

2014-05-23 Thread Lee Howard
On 5/22/14 9:41 PM, Martin Hannigan hanni...@gmail.com wrote: My job isn't to increase v6. It's to make sure we can serve traffic over protocols we are asked to. We are dual stacked which means our customers are. I'm not going to tell you what your job is. I'm curious, though, whether your

Re: Large DDoS, small extortion

2014-05-23 Thread Andrew Sullivan
On Fri, May 23, 2014 at 02:09:18PM -0400, Barry Shein wrote: I just don't know and would suggest reliance on case studies and experienced professionals. Well, yes, but I also observe that LE's interests and your own as the operator of the site diverge, because their risk isn't the same as

Re: Large DDoS, small extortion

2014-05-23 Thread Merike Kaeo
On May 23, 2014, at 3:03 AM, Matthew Petach mpet...@netflight.com wrote: On Fri, May 23, 2014 at 1:24 AM, Randy Bush ra...@psg.com wrote: Thanks everyone. There's been a lot of great on and off list responses, and we have a much better list of contacts for the next time this happens.

The Cidr Report

2014-05-23 Thread cidr-report
This report has been generated at Fri May 23 21:13:54 2014 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/2.0 for a current version of this report. Recent Table History

BGP Update Report

2014-05-23 Thread cidr-report
BGP Update Report Interval: 15-May-14 -to- 22-May-14 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS9829 116359 3.4% 70.5 -- BSNL-NIB National Internet Backbone,IN 2 - AS45514

Re: Large DDoS, small extortion

2014-05-23 Thread Larry Sheldon
On 5/23/2014 1:09 PM, Barry Shein wrote: On May 24, 2014 at 00:38 rdobb...@arbor.net (Roland Dobbins) wrote: Never, under any circumstances, pay. Not even if you've persuaded the Men from U.N.C.L.E. to help you, and they suggest you pay because they think they can trace the money, do

Re: Large DDoS, small extortion

2014-05-23 Thread Brett Frankenberger
On Fri, May 23, 2014 at 02:09:18PM -0400, Barry Shein wrote: On May 24, 2014 at 00:38 rdobb...@arbor.net (Roland Dobbins) wrote: Never, under any circumstances, pay. Not even if you've persuaded the Men from U.N.C.L.E. to help you, and they suggest you pay because they think they can

Oddity

2014-05-23 Thread Larry Sheldon
Odd that comics.com is dead and gocomics.com is down for Scheduled Maintenance at 2000 Central USA time. No the Intertubes are not down--lots of stuff is working, but those and some others are not. (Cox customer out of Omaha). -- Requiescas in pace o email Two identifying

Re: Oddity

2014-05-23 Thread Larry Sheldon
On 5/23/2014 9:00 PM, Larry Sheldon wrote: Odd that comics.com is dead and gocomics.com is down for Scheduled Maintenance at 2000 Central USA time. No the Intertubes are not down--lots of stuff is working, but those and some others are not. (Cox customer out of Omaha). Yes, I considered that