Re: Host.us DDOS attack -and- related conversations

2016-08-04 Thread Christopher Morrow
"it's good that there aren't any easy solutions to this sort of problem..." On Thu, Aug 4, 2016 at 12:03 PM, Robert Webb wrote: > Looks like ATL01 is down again hard. > > Although, as someone else mentioned earlier, IPv6 seems to be just fine. > > Robert > > On Wed, Aug 3,

Re: Host.us DDOS attack -and- related conversations

2016-08-04 Thread Robert Webb
Looks like ATL01 is down again hard. Although, as someone else mentioned earlier, IPv6 seems to be just fine. Robert On Wed, Aug 3, 2016 at 12:40 PM, Phil Gardner wrote: > One of my VPS with them is in Atlanta, and while the IPv4 address is > unresponsive, the IPv6

Re: Host.us DDOS attack -and- related conversations

2016-08-04 Thread Phil Gardner
One of my VPS with them is in Atlanta, and while the IPv4 address is unresponsive, the IPv6 address is working without issue. On 08/03/2016 11:08 AM, Soon Keat Neo wrote: > Back on topic about HostUS, I've been following a thread on LowEndTalk > where seemingly Alexander's been updating ( >

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Christopher Morrow
it's good that there aren't any easy solutions to this sort of problem... wait... that's wrong, there are. On Wed, Aug 3, 2016 at 12:04 PM, Robert Webb wrote: > Thanks for that link. My host is sitting in Atlanta and I believe that > Atlanta hosts their main

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Valdis . Kletnieks
On Wed, 03 Aug 2016 10:53:22 -0400, Alain Hebert said: > Between you and me, if only Elbonia are left DDoSing at 100Gbps, we > simply de-peer the commercial subnets from that country (leaving the > govt subnets up obviously) Explain why, for those of us who don't see it as obvious.

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Soon Keat Neo
Back on topic about HostUS, I've been following a thread on LowEndTalk where seemingly Alexander's been updating ( https://www.lowendtalk.com/discussion/comment/1791998/#Comment_1791998) - seems like Atlanta and LA are still down ATM based on latest reports - nearly 10 hours now. Tks. Regards,

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Robert Webb
Thanks for that link. My host is sitting in Atlanta and I believe that Atlanta hosts their main infrastructure. I am seeing around a 12 or 13 hour outage at this point. Robert On Wed, Aug 3, 2016 at 11:08 AM, Soon Keat Neo wrote: > Back on topic about HostUS, I've been

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Mike Hammett
://www.midwest-ix.com - Original Message - From: "Ca By" <cb.li...@gmail.com> To: aheb...@pubnix.net Cc: nanog@nanog.org Sent: Wednesday, August 3, 2016 10:05:04 AM Subject: Re: Host.us DDOS attack -and- related conversations On Wednesday, August 3, 2016, Al

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Mike Hammett
m> To: nanog@nanog.org Sent: Wednesday, August 3, 2016 9:40:17 AM Subject: Re: Host.us DDOS attack -and- related conversations On 3 August 2016 at 15:16, Alain Hebert <aheb...@pubnix.net> wrote: > PS: > > I will like to take this time to underline the lack of > particip

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Ca By
On Wednesday, August 3, 2016, Christopher Morrow wrote: > On Wed, Aug 3, 2016 at 10:40 AM, James Bensley > wrote: > > > How will > > BCP save you then? Can everyone stop praising it like it was a some > > magic bullet? > > > > aren't

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Mike Hammett
From: "Ca By" <cb.li...@gmail.com> To: aheb...@pubnix.net Cc: nanog@nanog.org Sent: Wednesday, August 3, 2016 9:36:09 AM Subject: Re: Host.us DDOS attack -and- related conversations On Wednesday, August 3, 2016, Alain Hebert <aheb...@pubnix.net> wrote: > Well, > >

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Alain Hebert
Well, I didn't want to pollute nanog list with my BCP38 (or other solutions) ranting, but come on: [1] How can insuring source IP's, coming out your network, are part of your advertised subnets pathetic and futile? Don't you think if the source ip are traceable back to OVH actually,

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Ca By
On Wednesday, August 3, 2016, Alain Hebert wrote: > Well, > > I'm sorry. > > That sound like the CloudFlare argument: You cannot fix the DDoSs > at the source because Elbonia can do it. The only solution is to pay > for protection. > > No. I hate the idea of

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Christopher Morrow
On Wed, Aug 3, 2016 at 10:40 AM, James Bensley wrote: > How will > BCP save you then? Can everyone stop praising it like it was a some > magic bullet? > aren't you making a 'perfect is the enemy of good' argument here? 'seatbelts don't solve all car crash deaths, so let's

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Alain Hebert
Well, I'm sorry. That sound like the CloudFlare argument: You cannot fix the DDoSs at the source because Elbonia can do it. The only solution is to pay for protection. Between you and me, if only Elbonia are left DDoSing at 100Gbps, we simply de-peer the commercial subnets

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread James Bensley
On 3 August 2016 at 15:16, Alain Hebert wrote: > PS: > > I will like to take this time to underline the lack of > participation from a vast majority of ISPs into BCP38 and the like. We > need to keep educating them at every occasion we have. > > For those

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Ca By
On Wednesday, August 3, 2016, Alain Hebert wrote: > Well, > > > Could it be related to the last 2 days DDoS of PokemonGO (which > failed) and some other gaming sites (Blizzard and Steam)? > > > And on the subject of CloudFlare, I'm sorry for that CloudFlare >

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Robert Webb
Not sure if it is related to the PokemonGO or not. This started around 23:00 EDT last night per my monitoring. Seems like a pretty big attack at 300Gbps and to also temporarily take a down a Tier 1 POP in a major city. I was interested as to if this might be a botnet or some type of reflection

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Robert Webb
Apologies to all as the hostname in my subject is incorrect. It should be hostus.us... On Wed, Aug 3, 2016 at 10:25 AM, Robert Webb wrote: > Not sure if it is related to the PokemonGO or not. This started around > 23:00 EDT last night per my monitoring. > > Seems like a

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Alain Hebert
Well, Could it be related to the last 2 days DDoS of PokemonGO (which failed) and some other gaming sites (Blizzard and Steam)? And on the subject of CloudFlare, I'm sorry for that CloudFlare person that defended their position earlier this week, but there may be more hints