Re: [VoiceOps] VoIP Provider DDoSes

2021-10-08 Thread Alex Balashov
>>> Mike Hammett >>> Intelligent Computing Solutions >>> http://www.ics-il.com >>> >>> >>> >>> Midwest Internet Exchange >>> http://www.midwest-ix.com >>> >>> >>> >>> From: "Jos

Re: [VoiceOps] VoIP Provider DDoSes

2021-10-08 Thread Tim Bray via VoiceOps
m: *"Joseph Jackson" mailto:jjack...@aninetworks.net>> *To: *"Mike Hammett" mailto:voice...@ics-il.net>> *Cc: *"Tim Bray" mailto:t...@kooky.org>>, voiceops@voiceops.org <mailto:voiceops@voiceops.org> *Sent: *Saturday, October 2, 2021 1

Re: [VoiceOps] VoIP Provider DDoSes

2021-10-07 Thread Jared Geiger
e Hammett" > *Cc: *"Tim Bray" , voiceops@voiceops.org > *Sent: *Saturday, October 2, 2021 11:20:26 AM > *Subject: *RE: [VoiceOps] VoIP Provider DDoSes > > Is now. If you look at their BGP announcements over the last week using > something like bgplay you can see them m

Re: [VoiceOps] VoIP Provider DDoSes

2021-10-04 Thread Mike Hammett
Exchange http://www.midwest-ix.com - Original Message - From: "Joseph Jackson" To: "Mike Hammett" Cc: "Tim Bray" , voiceops@voiceops.org Sent: Saturday, October 2, 2021 11:20:26 AM Subject: RE: [VoiceOps] VoIP Provider DDoSes Is now. If you look a

Re: [VoiceOps] VoIP Provider DDoSes

2021-10-02 Thread Mike Hammett
s@voiceops.org Sent: Saturday, October 2, 2021 11:20:26 AM Subject: RE: [VoiceOps] VoIP Provider DDoSes Is now. If you look at their BGP announcements over the last week using something like bgplay you can see them move all their prefixes behind cloudflare. From: Mike Hammett [mai

Re: [VoiceOps] VoIP Provider DDoSes

2021-10-02 Thread Joseph Jackson
@voiceops.org Subject: Re: [VoiceOps] VoIP Provider DDoSes Has been or is now? - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest Internet Exchange http://www.midwest-ix.com From: "Joseph Jackson" To: "Tim B

Re: [VoiceOps] VoIP Provider DDoSes

2021-10-02 Thread Mike Hammett
ober 2, 2021 9:43:23 AM Subject: Re: [VoiceOps] VoIP Provider DDoSes Bandwidth.com is using cloudflares magic transit for DDOS protection. Seems to be working ok. CF says it doesn’t matter the protocol they can scrub the traffic. From: VoiceOps [mailto:voiceops-boun...@voiceops.org] On Be

Re: [VoiceOps] VoIP Provider DDoSes

2021-10-02 Thread Joseph Jackson
To: voiceops@voiceops.org Subject: Re: [VoiceOps] VoIP Provider DDoSes On 26/09/2021 21:54, Mike Hammett wrote: Are your garden variety DDoS mitigation platforms or services equipped to handle DDoSes of VoIP services? What nuances does one have to be cognizant of? A WAF doesn't mean much to SIP

Re: [VoiceOps] VoIP Provider DDoSes

2021-10-01 Thread Tim Bray via VoiceOps
On 26/09/2021 21:54, Mike Hammett wrote: Are your garden variety DDoS mitigation platforms or services equipped to handle DDoSes of VoIP services? What nuances does one have to be cognizant of? A WAF doesn't mean much to SIP, IAX2, RTP, etc. Without saying too much: Seems to be a spate

Re: [VoiceOps] VoIP Provider DDoSes

2021-09-29 Thread Mike Hammett
Message - From: Mike Hammett To: Mike Hammett Cc: VoiceOps Sent: Tue, 28 Sep 2021 08:11:33 -0500 (CDT) Subject: Re: [VoiceOps] VoIP Provider DDoSes Are any of you that are not using the public Internet to connect to Bandwidth facing issues? Moving to a PNI certainly resolves anything directly

Re: [VoiceOps] VoIP Provider DDoSes

2021-09-29 Thread Mike Hammett
Solutions http://www.ics-il.com Midwest Internet Exchange http://www.midwest-ix.com - Original Message - From: Mike Hammett To: VoiceOps Sent: Sun, 26 Sep 2021 15:54:42 -0500 (CDT) Subject: [VoiceOps] VoIP Provider DDoSes I sent this to NANOG recently, not even thinking

Re: [VoiceOps] VoIP Provider DDoSes

2021-09-27 Thread David Knell via VoiceOps
A quick anecdote. One of our hosting providers (Hetzner) had a DDoS mitigation tool which blackholed our servers when they reached about 1500 concurrent call legs with RTP. That's about 75kpps in, which was presumably - and not entirely unreasonably - set as a threshold for DDoS attack

Re: [VoiceOps] VoIP Provider DDoSes

2021-09-26 Thread Alex Balashov via VoiceOps
It’s pretty bad out there. voip.ms are definitely not the only ones being hit. I’ve got a customer that’s been getting hit for a week, though seemingly no ransom demand and may not be the same outfit. > On Sep 26, 2021, at 4:54 PM, Mike Hammett wrote: > > I sent this to NANOG recently, not

[VoiceOps] VoIP Provider DDoSes

2021-09-26 Thread Mike Hammett
I sent this to NANOG recently, not even thinking that this list may get a better ROI. As many may know, a particular VoIP supplier is suffering a DDoS. https://twitter.com/voipms Are your garden variety DDoS mitigation platforms or services equipped to handle DDoSes of VoIP services? What