Re: Host.us DDOS attack -and- related conversations

2016-08-04 Thread Christopher Morrow
"it's good that there aren't any easy solutions to this sort of problem..." On Thu, Aug 4, 2016 at 12:03 PM, Robert Webb wrote: > Looks like ATL01 is down again hard. > > Although, as someone else mentioned earlier, IPv6 seems to be just fine. > > Robert > > On Wed, Aug 3, 2016 at 12:40 PM, Phil

Re: Host.us DDOS attack -and- related conversations

2016-08-04 Thread Robert Webb
Looks like ATL01 is down again hard. Although, as someone else mentioned earlier, IPv6 seems to be just fine. Robert On Wed, Aug 3, 2016 at 12:40 PM, Phil Gardner wrote: > One of my VPS with them is in Atlanta, and while the IPv4 address is > unresponsive, the IPv6 address is working without i

Re: Host.us DDOS attack -and- related conversations

2016-08-04 Thread Phil Gardner
One of my VPS with them is in Atlanta, and while the IPv4 address is unresponsive, the IPv6 address is working without issue. On 08/03/2016 11:08 AM, Soon Keat Neo wrote: > Back on topic about HostUS, I've been following a thread on LowEndTalk > where seemingly Alexander's been updating ( > https

Re: Host.us DDOS attack

2016-08-03 Thread Jason Canady
s point of view, it’s a pretty shitty situation for their customer, and their customers/customers. -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Tony Wicks Sent: Thursday, 4 August 2016 9:10 AM To: 'NANOG list' Subject: RE: Host.us DDOS attack Int

RE: Host.us DDOS attack

2016-08-03 Thread Tony Wicks
nanog-boun...@nanog.org] On Behalf Of Tony Wicks Sent: Thursday, 4 August 2016 9:10 AM To: 'NANOG list' Subject: RE: Host.us DDOS attack Interestingly my VM (LA) with them has been effectively down for half a day as far as IPv4 is concerned. IPv6 traffic seems unaffected.

RE: Host.us DDOS attack

2016-08-03 Thread Tony Wicks
Subject: Host.us DDOS attack Anyone have any additonal info on a DDOS attack hitting host.us? Woke up to no email this morning and the following from their web site:

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Christopher Morrow
it's good that there aren't any easy solutions to this sort of problem... wait... that's wrong, there are. On Wed, Aug 3, 2016 at 12:04 PM, Robert Webb wrote: > Thanks for that link. My host is sitting in Atlanta and I believe that > Atlanta hosts their main infrastructure. > > I am seeing arou

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Valdis . Kletnieks
On Wed, 03 Aug 2016 10:53:22 -0400, Alain Hebert said: > Between you and me, if only Elbonia are left DDoSing at 100Gbps, we > simply de-peer the commercial subnets from that country (leaving the > govt subnets up obviously) Explain why, for those of us who don't see it as obvious. pgpYJVA

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Soon Keat Neo
Back on topic about HostUS, I've been following a thread on LowEndTalk where seemingly Alexander's been updating ( https://www.lowendtalk.com/discussion/comment/1791998/#Comment_1791998) - seems like Atlanta and LA are still down ATM based on latest reports - nearly 10 hours now. Tks. Regards, Ne

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Robert Webb
Thanks for that link. My host is sitting in Atlanta and I believe that Atlanta hosts their main infrastructure. I am seeing around a 12 or 13 hour outage at this point. Robert On Wed, Aug 3, 2016 at 11:08 AM, Soon Keat Neo wrote: > Back on topic about HostUS, I've been following a thread on Lo

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Mike Hammett
http://www.midwest-ix.com - Original Message - From: "Ca By" To: aheb...@pubnix.net Cc: nanog@nanog.org Sent: Wednesday, August 3, 2016 10:05:04 AM Subject: Re: Host.us DDOS attack -and- related conversations On Wednesday, August 3, 2016, Alain Hebert wrote: > Wel

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Mike Hammett
nanog.org Sent: Wednesday, August 3, 2016 9:40:17 AM Subject: Re: Host.us DDOS attack -and- related conversations On 3 August 2016 at 15:16, Alain Hebert wrote: > PS: > > I will like to take this time to underline the lack of > participation from a vast majority of ISPs into BCP38 and t

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Ca By
On Wednesday, August 3, 2016, Christopher Morrow wrote: > On Wed, Aug 3, 2016 at 10:40 AM, James Bensley > wrote: > > > How will > > BCP save you then? Can everyone stop praising it like it was a some > > magic bullet? > > > > aren't you making a 'perfect is the enemy of good' argument here? > >

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Mike Hammett
- From: "Ca By" To: aheb...@pubnix.net Cc: nanog@nanog.org Sent: Wednesday, August 3, 2016 9:36:09 AM Subject: Re: Host.us DDOS attack -and- related conversations On Wednesday, August 3, 2016, Alain Hebert wrote: > Well, > > > Could it be related to the last 2 days DD

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Alain Hebert
Well, I didn't want to pollute nanog list with my BCP38 (or other solutions) ranting, but come on: [1] How can insuring source IP's, coming out your network, are part of your advertised subnets pathetic and futile? Don't you think if the source ip are traceable back to OVH actually,

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Ca By
On Wednesday, August 3, 2016, Alain Hebert wrote: > Well, > > I'm sorry. > > That sound like the CloudFlare argument: You cannot fix the DDoSs > at the source because Elbonia can do it. The only solution is to pay > for protection. > > No. I hate the idea of paying for protection fr

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Christopher Morrow
On Wed, Aug 3, 2016 at 10:40 AM, James Bensley wrote: > How will > BCP save you then? Can everyone stop praising it like it was a some > magic bullet? > aren't you making a 'perfect is the enemy of good' argument here? 'seatbelts don't solve all car crash deaths, so let's just go mad-max!'

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Alain Hebert
Well, I'm sorry. That sound like the CloudFlare argument: You cannot fix the DDoSs at the source because Elbonia can do it. The only solution is to pay for protection. Between you and me, if only Elbonia are left DDoSing at 100Gbps, we simply de-peer the commercial subnets from

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread James Bensley
On 3 August 2016 at 15:16, Alain Hebert wrote: > PS: > > I will like to take this time to underline the lack of > participation from a vast majority of ISPs into BCP38 and the like. We > need to keep educating them at every occasion we have. > > For those that actually impleme

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Ca By
On Wednesday, August 3, 2016, Alain Hebert wrote: > Well, > > > Could it be related to the last 2 days DDoS of PokemonGO (which > failed) and some other gaming sites (Blizzard and Steam)? > > > And on the subject of CloudFlare, I'm sorry for that CloudFlare > person that defended thei

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Robert Webb
Not sure if it is related to the PokemonGO or not. This started around 23:00 EDT last night per my monitoring. Seems like a pretty big attack at 300Gbps and to also temporarily take a down a Tier 1 POP in a major city. I was interested as to if this might be a botnet or some type of reflection at

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Robert Webb
Apologies to all as the hostname in my subject is incorrect. It should be hostus.us... On Wed, Aug 3, 2016 at 10:25 AM, Robert Webb wrote: > Not sure if it is related to the PokemonGO or not. This started around > 23:00 EDT last night per my monitoring. > > Seems like a pretty big attack at 3

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Alain Hebert
Well, Could it be related to the last 2 days DDoS of PokemonGO (which failed) and some other gaming sites (Blizzard and Steam)? And on the subject of CloudFlare, I'm sorry for that CloudFlare person that defended their position earlier this week, but there may be more hints (unverif

Host.us DDOS attack

2016-08-03 Thread Robert Webb
Anyone have any additonal info on a DDOS attack hitting host.us? Woke up to no email this morning and the following from their web site: *Following an extortion attempt, HostUS is currently experiencing sustained large-scale DDOS attacks against a number of locations. The attacks were measured