Re: ARIN down?

2016-03-26 Thread Jon Lewis
On Sat, 26 Mar 2016, Daniel Corbe wrote: An announcement went out on arin-announce yesterday (but you might not be able to follow the link if you canÿÿt reach list.arin.net): http://lists.arin.net/pipermail/arin-announce/2016-March/001963.html tl;dr: Massive DDoS. Usual affair. Welcome to t

Re: ARIN down?

2016-03-25 Thread Mel Beckman
Since they’re hosted at NTT, that you can reach it from their seems reasonable. But I’ve just tried again from my Level 3 rack in the Santa Barbara hub, and no access. So it’s intermittent at best. Hopefully they’ll get clear soon. We had a turn-up today that got waylaid by the outage. -mel

Re: ARIN down?

2016-03-25 Thread Bill Woodcock
> On Mar 25, 2016, at 10:26 PM, Mel Beckman wrote: > I’ve tried accessing the web site from nine different networks: Cox, Comcast, > Level3, Verizon, AT&T, CenturyLink, Frontier, Sprint and Cogent. None of them > can reach it. I can reach it just fine via Level3 and NTT right now.

Re: ARIN down?

2016-03-25 Thread Mel Beckman
William, How did you determine that ARIN is accessible for “most of the rest of the Internet”? I’ve tried accessing the web site from nine different networks: Cox, Comcast, Level3, Verizon, AT&T, CenturyLink, Frontier, Sprint and Cogent. None of them can reach it. I’ve used non-firewalled netw

Re: ARIN down?

2016-03-25 Thread William Herrin
On Sat, Mar 26, 2016 at 1:08 AM, Mel Beckman wrote: > I’m sure we all sympathize with the workload a DDOS attack imposes, > as most of us have been there. But I can’t understand why there is so > little broadcast communication of the attack through multiple channels. http://www.downforeveryoneorj

Re: ARIN down?

2016-03-25 Thread Bill Woodcock
> On Mar 25, 2016, at 9:51 PM, Mel Beckman wrote: > > You’d think with all the money they collect, they’d have permanent DDOS > mitigation in place. They do, and they’re using it. -Bill signature.asc Description: Message signed with OpenPGP using GPGMail

Re: ARIN down?

2016-03-25 Thread William Herrin
On Sat, Mar 26, 2016 at 12:51 AM, Mel Beckman wrote: > You’d think with all the money they collect, they’d have permanent DDOS > mitigation in place. Time for them to call BlackLotus :) Hi Mel, They do. www.arin.net is accessible for me and most of the rest of the Internet. Your traceroute didn

Re: ARIN down?

2016-03-25 Thread Mel Beckman
I’m sure we all sympathize with the workload a DDOS attack imposes, as most of us have been there. But I can’t understand why there is so little broadcast communication of the attack through multiple channels. lists.arin.net is rather esoteric. Facebook and Twitter are ob

Re: ARIN down?

2016-03-25 Thread Mel Beckman
Yeah, lists.arin.net is down too, despite being hosted elsewhere. The netvermin apparently are being thorough. Still, there are many ways to broadly distribute static content like mailing lists. -mel On Mar 25, 2016, at 9:51 PM, Daniel Corbe mailto:dco...@hammerfiber.co

Re: ARIN down?

2016-03-25 Thread Bill Woodcock
> On Mar 25, 2016, at 9:43 PM, Mel Beckman wrote: > > I haven’t been able to connect to http://arin.net for several hours > I recall ARIN had a DDoS attack a week or so ago. Does anybody know if this > is a recurrence? Yes, it is. I attach Mark’s notice about it from this afternoon.

Re: ARIN down?

2016-03-25 Thread Daniel Corbe
> On Mar 26, 2016, at 12:43 AM, Mel Beckman wrote: > > I haven’t been able to connect to http://arin.net for several hours, but was > able to open a ticket this morning. I’ve tried from several different > networks, all roads seem to lead to the same place, with packets dropping at > the NTT

Re: ARIN down?

2016-03-25 Thread Mel Beckman
You’d think with all the money they collect, they’d have permanent DDOS mitigation in place. Time for them to call BlackLotus :) -mel > On Mar 25, 2016, at 9:46 PM, David Conrad wrote: > > Yep, they're under another DDoS attack: > >> Begin forwarded message: >> >> From: ARIN >> Subject: [a

Re: ARIN down?

2016-03-25 Thread David Conrad
Yep, they're under another DDoS attack: > Begin forwarded message: > > From: ARIN > Subject: [arin-announce] ARIN DDoS Attack > Date: March 25, 2016 at 1:31:34 PM PDT > To: arin-annou...@arin.net > > Starting at 3:55 PM EDT on Friday, 25 March, a DDoS attack began against > ARIN. This was and