Gamma were recently DDoS attacked. I wouldn't say they were small. It affected a large part of their network
Regards Thomas Sent from my iPhone. Apologies for any typos, grammatical mistakes or lack of punctuation. > On 9 Dec 2015, at 12:00, "[email protected]" > <[email protected]> wrote: > > Send uknof mailing list submissions to > [email protected] > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.uknof.org.uk/cgi-bin/mailman/listinfo/uknof > or, via email, send a message with subject or body 'help' to > [email protected] > > You can reach the person managing the list at > [email protected] > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of uknof digest..." > > > Today's Topics: > > 1. DOS attacks in UK (Christian de Larrinaga) > 2. Re: JANET DoS (James Bensley) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 08 Dec 2015 13:16:33 +0000 > From: Christian de Larrinaga <[email protected]> > To: "[email protected]" <[email protected]>, UKNOF mail lists > <[email protected]> > Subject: [uknof] DOS attacks in UK > Message-ID: <[email protected]> > Content-Type: text/plain; charset="utf-8" > > Janet is suffering a substantial DOS today. I also witnessed a smaller > commercial ISP I use being hammered a couple of weeks ago. > > Is a record being kept of these attacks with data suitable for research > / future mitigation purposes? > > > -- > Christian de Larrinaga FBCS, CITP, > ------------------------- > @ FirstHand > ------------------------- > +44 7989 386778 > [email protected] > ------------------------- > > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > <https://lists.uknof.org.uk/cgi-bin/mailman/private/uknof/attachments/20151208/9cb93229/attachment-0001.html> > > ------------------------------ > > Message: 2 > Date: Wed, 9 Dec 2015 09:14:46 +0000 > From: James Bensley <[email protected]> > Cc: "[email protected]" <[email protected]> > Subject: Re: [uknof] JANET DoS > Message-ID: > <CAAWx_pW89Lq5u=0Vh7==nyxxg6nuuimgsrzmxjgae2gbdn3...@mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Hi All, > > Did anyone get any info they can share (off list if preferred) about > yesterdays attack, we had many JANET services affected. > > Also any UK (London specifically) Level3 cusotmers here that had any > issues yesterday? During the JANET DDoS attackes we had some weird > perfrormance issues on our L3 link, its a far flung guess but I > wondered if L3 were carrying a good portion of that DDoS traffic, and > "near" our peering with them. > > Only on our L3 feed we saw packet loss peaking between 09:00 and 11:00 > yesterday but more weirdly though we had a much higher than usual > number of BGP updates from L3. Between 09:00 and 11:00 we received > about 10886 updates, from TaTa and Cogent for the same time period > respectively 3076 and 5171. Also when I looked about 18:00 yesterday > 10% of the full table routes received from L3 had an age of less than > 1 day, so 10% of the global table has flapped via Level3 for us. I > also saw something similar on RIPE BGPplay, they saw a spike in > updates from Level3 at 09:20 to be exact (we don't have such presice > measurements internally). > > Its all a bit wooly to pull anything together from than but it seems > like "something" was up and it was worst around the time Janet were > being DDoSed. > > Cheers, > James. > > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > uknof mailing list > [email protected] > https://lists.uknof.org.uk/cgi-bin/mailman/listinfo/uknof > > ------------------------------ > > End of uknof Digest, Vol 84, Issue 4 > ************************************
