[AusNOG] NTP reflection used for world's largest DDoS

Jarryd Sullivan Jarryd.Sullivan at area9.com.au
Thu Feb 13 14:55:22 EST 2014


Probably a bit of a newbie question here, but what makes it so hard to mitigate such large attacks? What methods are involved in mitigating such large attacks? I assume this DDoS is still being maintained as my traffic to EU and the US is horrible at times, packet loss and high latency.

Jarryd Sullivan

-----Original Message-----
From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Trent Farrell
Sent: Thursday, 13 February 2014 12:54 PM
To: Dobbins, Roland; ausnog at lists.ausnog.net
Subject: Re: [AusNOG] NTP reflection used for world's largest DDoS

https://twitter.com/DerpTrolling/status/433025122258010112

In case you were interested, the organization I work for were the target of the huge one.

-----Original Message-----
From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Dobbins, Roland
Sent: Wednesday, February 12, 2014 12:50 AM
To: ausnog at lists.ausnog.net
Subject: Re: [AusNOG] NTP reflection used for world's largest DDoS


On Feb 12, 2014, at 3:17 PM, Jeremy Begg <jeremy at vsm.com.au> wrote:

> Besides, the attack is described in a CERT alert from last month:

Actually, ntp reflection/amplification DDoS attacks have been launched by attackers for years - it's just that they received some mainstream press scrutiny in the last couple of months when they were used to attack a couple of high-profile online gaming networks with tens of millions of simultaneous users.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

          Luck is the residue of opportunity and design.

                       -- John Milton

_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

________________________________

The information contained in this message and any attachments may be confidential information. If you are not the intended recipient, you must not use or forward the information contained in these documents. If you have received this message in error, please delete the email and notify the sender.

Internet communications are not secure. You should scan this message and any attachments for viruses. Under no circumstances do we accept liability for any loss or damage which may result from your receipt of this message or any attachments.


More information about the AusNOG mailing list