Re: "Defensive" BGP hijacking?

2016-09-12 Thread Paras Jha
Well don't forget, normal attacks launched from vDOS were around 8 - 16gbps. On the Krebs article, he mentions "the company received an email directly from vDOS claiming credit for the attack" Now, if this holds true, it's likely that the operator of vDOS (Apple J4ck was his moniker) was

Re: Zayo Extortion

2016-08-15 Thread Paras Jha
Yeah, I see a wall of text, but no real evidence to substantiate it. On Mon, Aug 15, 2016 at 8:29 AM, Mike Hammett wrote: > Try more facts and less emotion. > > > > - > Mike Hammett > Intelligent Computing Solutions > > Midwest Internet Exchange > > The Brothers WISP > > >

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-28 Thread Paras Jha
Nothing is going to happen. Cloudflare will continue to turn a blind eye towards abusive customers, and even downright allow customers to HTTP scan from their network without batting an eyelash. The mere act of scanning isn't illegal, but it shows the kind of mindset that they have.

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Paras Jha
e a class action lawsuit would sidestep this. Don't quote me on that though, I may be wrong. On Wed, Jul 27, 2016 at 10:04 PM, Paras Jha <pa...@protrafsolutions.com> wrote: > He's right, conspiracy to commit X is a valid criminal charge, at least in > the US. Conspiracy to commit

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Paras Jha
He's right, conspiracy to commit X is a valid criminal charge, at least in the US. Conspiracy to commit fraud, theft, murder, racketeering, etc are all "sister charges" of charges of ones actually carried out.

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Paras Jha
Hi Randy, I've found the vast majority of large service providers to be very receptive to abuse reports when they contain evidence and valid information. Regards Paras

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Paras Jha
Hi Justin, I have submitted abuse reports in the past, maybe from 2014 - 2015, but I gave up after I consistently did not even get replies and saw no action being taken. It is the same behavior with other providers who host malware knowingly. I appreciate you coming out onto the list though, it's

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Paras Jha
Hi Jair, This list is really interesting. >From just a preliminary test, more than half of these domains are hiding behind Cloudflare, and OVH has a sizable fraction too. I suppose it's inevitable, given that both are known for having non-existent abuse departments. Regards On Wed, Jul 27,

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Paras Jha
lity to help stop abuse. Just my 2C On Tue, Jul 26, 2016 at 11:02 PM, Paras Jha <pa...@protrafsolutions.com> wrote: > Justin, > > The only problem with that statement is that it's not true: if you did > terminate service to them, the websites would go away. Maybe not

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Paras Jha
situations where law > enforcement has required that we *not* terminate service to certain > websites. In those situations we are of course not allowed to discuss > specifics. > > > Justin Paine > Head of Trust & Safety > CloudFlare Inc. > PGP: BBAA 6BCE 3305

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Paras Jha
, Jul 26, 2016 at 10:33 PM, Paras Jha <pa...@protrafsolutions.com> wrote: > This is quite common, almost all of the DDoS-for-hire services are hosted > behind CloudFlare, and a great majority of them take PayPal. Another one > had even managed to secure an EV SSL cert. > >

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Paras Jha
This is quite common, almost all of the DDoS-for-hire services are hosted behind CloudFlare, and a great majority of them take PayPal. Another one had even managed to secure an EV SSL cert. On Tue, Jul 26, 2016 at 10:24 PM, Dovid Bender wrote: > I used to have a boss that

Re: students questions

2016-07-25 Thread Paras Jha
Hi, Try taking a look at Zoho, they offer what you're looking for for free. Regards On Mon, Jul 25, 2016 at 12:11 PM, sam wrote: > Hello if this is not appropriate for this list please excuse me and > disregard this email. I thought of no better place than this place

Re: NANOG67 - Tipping point of community and sponsor bashing?

2016-06-14 Thread Paras Jha
The world of networking is in itself decentralized. In the event a certain network starts behaving badly, other networks will take appropriate action by themselves if they see it as a problem. I see no need to become a nanny state over issues like this. If someone is being belligerent and harming

Re: Google GeoIP issue

2016-06-01 Thread Paras Jha
We had the same issue, there's a form you can fill out on Google's site if you visit the homepage from one of the IPs in question. However, I don't remember the exact link. On Wed, Jun 1, 2016 at 6:17 PM, Peter Loron wrote: > Hello folks. An address we use is not

Re: Arista Routing Solutions

2016-04-26 Thread Paras Jha
Just wanted to interject, the port density of the Arista switches is quite impressive, especially considering the price point they're at. On Tue, Apr 26, 2016 at 12:46 PM, Ryan Woolley wrote: > While the QFX in general is similar to Jericho-based platforms, I think the

Re: Major IX bandwidth sharing

2016-04-21 Thread Paras Jha
heaper price just ask any TIER-1 provider for link with > > commit > > > 10ge and burst up to 100GE. It will be definitely cheaper and simpler > > than > > > your "magic" with IX cost reduction. > > > > > > On Thursday, 21 April 2016, Paras Jha

Re: Major IX bandwidth sharing

2016-04-21 Thread Paras Jha
Interesting to see how the idea is gaining traction On Thu, Apr 21, 2016 at 8:52 AM, Piotr Iwanejko wrote: > Hello Nanog-ers, > > We are looking for a company that has >=100G connectivity to major IX-es > (AMS-IX, DE-CIX preferred) with traffic asymmetry/heavy outgoing

Re: FCC Privacy NPRM

2016-04-14 Thread Paras Jha
Page Not Found Link wasn't copied correctly, the "consumer-privacy" bit was cut off. Here's the working link: https://www.fcc.gov/document/fcc-releases-proposed-rules-protect-broadband-consumer-privacy On Thu, Apr 14, 2016 at 1:23 PM, Sean Donelan wrote: > On Thu, 14 Apr

NTT communications horrible routing, unresponsive NOC

2016-03-23 Thread Paras Jha
Hi all, I've been trying to get this issue resolved for the entire day now, but NTT has been pretty unreceptive here. We're announcing a large prefix for a client across our network, and we discovered some insanely high latency. After tracking down the issue, we determined it to be something

Any large IPv4 space brokers?

2016-03-01 Thread Paras Jha
Does anyone know of any IP space brokers other than Hilco Streambank? I'm looking to get a feel for the market a little bit. Regards Paras

Re: Southwest Airlines captive portal

2016-02-27 Thread Paras Jha
You got MITM'd On Sat, Feb 27, 2016 at 1:57 PM, Damien Burke wrote: > You should change your paypal password. > > -Original Message- > From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Frank Bulk > Sent: Saturday, February 27, 2016 10:27 AM > To:

Re: Thank you, Comcast.

2016-02-25 Thread Paras Jha
It's interesting that they'd call about DNS amplification... You don't typically see DNS amplified floods coming from home ISPs. I would imagine SSDP amplification is a far greater issue for any home ISP. On Thu, Feb 25, 2016 at 10:46 PM, Mike Hammett wrote: > I know. It seems

Re: Cogent & Google IPv6

2016-02-24 Thread Paras Jha
Transit providers are the mdidlemen of the internet, I see no problem with the concept of "double dipping". It's their fiber and infrastructure, if you want access to everything on their network, including other people on their network, pay for it or find a way to get access. On Wed, Feb 24, 2016

Looking for GTT contact

2016-02-10 Thread Paras Jha
Hello, Can a rep for GTT contact me off-list? I tried twice using their website, but nobody has gotten back to me for a few days now. Thanks in advance!