Re: ARIN down?

On Sat, 26 Mar 2016, Daniel Corbe wrote: An announcement went out on arin-announce yesterday (but you might not be able to follow the link if you canÿÿt reach list.arin.net): http://lists.arin.net/pipermail/arin-announce/2016-March/001963.html tl;dr: Massive DDoS. Usual affair. Welcome to

Re: ARIN down?

Since they’re hosted at NTT, that you can reach it from their seems reasonable. But I’ve just tried again from my Level 3 rack in the Santa Barbara hub, and no access. So it’s intermittent at best. Hopefully they’ll get clear soon. We had a turn-up today that got waylaid by the outage. -mel

Re: ARIN down?

> On Mar 25, 2016, at 10:26 PM, Mel Beckman wrote: > I’ve tried accessing the web site from nine different networks: Cox, Comcast, > Level3, Verizon, AT, CenturyLink, Frontier, Sprint and Cogent. None of them > can reach it. I can reach it just fine via Level3 and NTT right

Re: ARIN down?

William, How did you determine that ARIN is accessible for “most of the rest of the Internet”? I’ve tried accessing the web site from nine different networks: Cox, Comcast, Level3, Verizon, AT, CenturyLink, Frontier, Sprint and Cogent. None of them can reach it. I’ve used non-firewalled

Re: ARIN down?

On Sat, Mar 26, 2016 at 1:08 AM, Mel Beckman wrote: > I’m sure we all sympathize with the workload a DDOS attack imposes, > as most of us have been there. But I can’t understand why there is so > little broadcast communication of the attack through multiple channels.

Re: ARIN down?

> On Mar 25, 2016, at 9:51 PM, Mel Beckman wrote: > > You’d think with all the money they collect, they’d have permanent DDOS > mitigation in place. They do, and they’re using it. -Bill signature.asc Description: Message signed with

Re: ARIN down?

On Sat, Mar 26, 2016 at 12:51 AM, Mel Beckman wrote: > You’d think with all the money they collect, they’d have permanent DDOS > mitigation in place. Time for them to call BlackLotus :) Hi Mel, They do. www.arin.net is accessible for me and most of the rest of the Internet.

Re: ARIN down?

I’m sure we all sympathize with the workload a DDOS attack imposes, as most of us have been there. But I can’t understand why there is so little broadcast communication of the attack through multiple channels. lists.arin.net is rather esoteric. Facebook and Twitter are

Re: ARIN down?

Yeah, lists.arin.net is down too, despite being hosted elsewhere. The netvermin apparently are being thorough. Still, there are many ways to broadly distribute static content like mailing lists. -mel On Mar 25, 2016, at 9:51 PM, Daniel Corbe

Re: ARIN down?

> On Mar 25, 2016, at 9:43 PM, Mel Beckman wrote: > > I haven’t been able to connect to http://arin.net for several hours > I recall ARIN had a DDoS attack a week or so ago. Does anybody know if this > is a recurrence? Yes, it is. I attach Mark’s notice about it from this

Re: ARIN down?

> On Mar 26, 2016, at 12:43 AM, Mel Beckman wrote: > > I haven’t been able to connect to http://arin.net for several hours, but was > able to open a ticket this morning. I’ve tried from several different > networks, all roads seem to lead to the same place, with packets

Re: ARIN down?

You’d think with all the money they collect, they’d have permanent DDOS mitigation in place. Time for them to call BlackLotus :) -mel > On Mar 25, 2016, at 9:46 PM, David Conrad wrote: > > Yep, they're under another DDoS attack: > >> Begin forwarded message: >> >>

Re: ARIN down?

Yep, they're under another DDoS attack: > Begin forwarded message: > > From: ARIN > Subject: [arin-announce] ARIN DDoS Attack > Date: March 25, 2016 at 1:31:34 PM PDT > To: arin-annou...@arin.net > > Starting at 3:55 PM EDT on Friday, 25 March, a DDoS attack began against >

ARIN down?

I haven’t been able to connect to http://arin.net for several hours, but was able to open a ticket this morning. I’ve tried from several different networks, all roads seem to lead to the same place, with packets dropping at the NTT interface 129.250.196.154. e.g.: $ traceroute