nanog mailing list archives
Re: "Defensive" BGP hijacking?
From: Paras Jha <paras () protrafsolutions com>
Date: Mon, 12 Sep 2016 17:03:06 -0400
Well don't forget, normal attacks launched from vDOS were around 8 - 16gbps. On the Krebs article, he mentions "the company received an email directly from vDOS claiming credit for the attack" Now, if this holds true, it's likely that the operator of vDOS (Apple J4ck was his moniker) was directing the full resources of the network towards BackConnect. Given that Brian indicated that at any given time vDOS could be launching 10 - 15 times (9 "DDoS years" or something in a few months), the full force of the vDOS network could easily amount to 200gbps.
This behavior is never defensible nor acceptable. In addition to being in the wrong with BGP hijacking a prefix, it appears that Mr. Townsend had the wrong target, too. We've been attacked a few dozen times by this botnet, and they could never muster anything near 200 gbps worth of traffic. They were orders of magnitude smaller, only around 8-16 gbps depending on attack. Mr. Townsend's motives were wrong and so was his information.
Current thread:
- "Defensive" BGP hijacking? Hugo Slabbert (Sep 11)
- Re: "Defensive" BGP hijacking? FHR (Sep 11)
- Re: "Defensive" BGP hijacking? Ca By (Sep 11)
- Re: "Defensive" BGP hijacking? Blake Hudson (Sep 12)
- Re: "Defensive" BGP hijacking? Ryan, Spencer (Sep 12)
- Re: "Defensive" BGP hijacking? Mel Beckman (Sep 12)
- Re: "Defensive" BGP hijacking? Florian Weimer (Sep 12)
- Re: "Defensive" BGP hijacking? Jared Mauch (Sep 12)
- Re: "Defensive" BGP hijacking? Ryan, Spencer (Sep 12)
- Re: "Defensive" BGP hijacking? Paras Jha (Sep 12)
- Re: "Defensive" BGP hijacking? Mel Beckman (Sep 12)
- Re: "Defensive" BGP hijacking? Hugo Slabbert (Sep 12)
- Re: "Defensive" BGP hijacking? Jean-Francois Mezei (Sep 12)
- Re: "Defensive" BGP hijacking? Valdis . Kletnieks (Sep 12)
- Re: "Defensive" BGP hijacking? Jean-Francois Mezei (Sep 12)
- <Possible follow-ups>
- Re: "Defensive" BGP hijacking? Scott Weeks (Sep 12)
- Re: "Defensive" BGP hijacking? Blake Hudson (Sep 12)
- Re: "Defensive" BGP hijacking? John Curran (Sep 12)