<div dir="ltr">Aye hundreds of booters, most come from a few core botnets or booter groups, many of the ones you can find on say hackforums change every couple weeks/months with them being operated by the same people, sometimes even the same paypal. And yes I know this from researching them.<div>
<br></div><div>@Tom I'm always interested to see how much you guys get hit with, as aside from some massive organisations, I think you guys are probably one of the larger companies out there on the scale of spare capacity. Funnily enough, AWS singapore doesn't seem to have enough spare capacity to weather some of the booters and in some instances lost reachability for the duration of the attacks pretty much globally during a "proving". Similarly with a top AU ISP, international links became saturated with relative ease (well, 30gbps+). Anyway all that to say it is quite a problem we face in Australia, even to the scale of business DSL, who can't possibly afford DDoSprotecting as they won't be getting a connection via M21, butinstead just Telstra et al.</div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Oct 18, 2013 at 11:31 PM, Tom Paseka <span dir="ltr"><<a href="mailto:tom@cloudflare.com" target="_blank">tom@cloudflare.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">There are hundreds of booters out there. We regularly see hits from 2mbps up to 10Gbps+ from various ones, using various methods (synfloods, dns reflections etc)</div>
<div class="gmail_extra"><br><br><div class="gmail_quote"><div><div class="h5">
On Fri, Oct 18, 2013 at 5:30 AM, James Braunegg <span dir="ltr"><<a href="mailto:james.braunegg@micron21.com" target="_blank">james.braunegg@micron21.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div class="h5">
<div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal"><span>Dear Joel<u></u><u></u></span></p><p class="MsoNormal"><span><u></u> <u></u></span></p><p class="MsoNormal"><span>Absolutely this “could be a booter system” although normally sources are a lot less than what we saw…<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p><p class="MsoNormal"><span>Regardless or not… someone is handing powerful tools to anyone who wants to use them… that’s the worrying part.<u></u><u></u></span></p>
<div><p class="MsoNormal"><span><u></u> <u></u></span></p><p class="MsoNormal"><span>Kindest Regards<u></u><u></u></span></p><p class="MsoNormal"><span><u></u> <u></u></span></p><p class="MsoNormal">
<span><u></u> <u></u></span></p><div><p class="MsoNormal"><b><span style="font-family:"Verdana","sans-serif"">James Braunegg<br></span></b><b><span style="font-size:8.0pt;font-family:"Verdana","sans-serif"">P:</span></b><span style="font-size:8.0pt;font-family:"Verdana","sans-serif""> 1300 769 972 | <b>M:</b> 0488 997 207 | <b>D:</b> (03) 9751 7616</span><span style="font-size:8.0pt;font-family:"Verdana","sans-serif""><u></u><u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:8.0pt;font-family:"Verdana","sans-serif"">E:</span></b><span style="font-size:8.0pt;font-family:"Verdana","sans-serif""> </span><span><a href="mailto:james.braunegg@micron21.com" target="_blank"><span style="font-size:8.0pt;font-family:"Verdana","sans-serif"">james.braunegg@micron21.com</span></a></span><span style="font-size:8.0pt;font-family:"Verdana","sans-serif""> | <b>ABN:</b> <a href="tel:12%20109%20977%20666" value="+12109977666" target="_blank">12 109 977 666</a> <br>
<b>W:</b> <a href="http://www.micron21.com/ip-transit" target="_blank"><span>www.micron21.com/ip-transit</span></a></span><span style="font-size:8.0pt;font-family:"Verdana","sans-serif""> </span><span style="font-size:8.0pt;font-family:"Verdana","sans-serif""> <b>T:</b> @micron21<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Verdana","sans-serif""><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Verdana","sans-serif""><br>
<img border="0" width="250" height="39" src="cid:image001.jpg@01CECC57.3DD23350" alt="Description: Description: Description: Description: M21.jpg"><br></span><span lang="EN-AU" style="font-size:8.0pt;font-family:"Verdana","sans-serif"">This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.</span><span style="font-size:8.0pt;font-family:"Verdana","sans-serif""><u></u><u></u></span></p>
</div><p class="MsoNormal"><span><u></u> <u></u></span></p></div><div><div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Zone Networks - Joel [mailto:<a href="mailto:joel@zonenetworks.com.au" target="_blank">joel@zonenetworks.com.au</a>] <br>
<b>Sent:</b> Friday, October 18, 2013 7:27 PM<br><b>To:</b> James Braunegg; <a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a><br><b>Subject:</b> RE: [AusNOG] Network Stress Test Results - Frightening speeds of 900+ mbits<u></u><u></u></span></p>
</div></div><div><div><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d">Hi James<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d">What you have just tested is known as a booter… nothing more…<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d">Kiddies use these types of service to DDOS games servers every day.<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d">The IP’s are just compromised servers, unpatched servers, dns servers etc…<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d">They are 100’s of these booters on the internet, most are paid service<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d">As you test different once you find they are from Asia, East Asia, USA, or EU, basically everywhere </span><span lang="EN-AU" style="font-family:Wingdings;color:#1f497d">J</span><span lang="EN-AU" style="color:#1f497d"> , depending on the owner and how good they are at finding unpatched/compromised servers.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d">Anyway that is my 2cents worth…<u></u><u></u></span></p><p class="MsoNormal">
<span lang="EN-AU" style="color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d">Regards<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d">Joel<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-AU" style="color:#1f497d"><u></u> <u></u></span></p><div><div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> AusNOG [mailto:<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a>] <b>On Behalf Of </b>James Braunegg<br>
<b>Sent:</b> Friday, 18 October 2013 6:31 PM<br><b>To:</b> <a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a><br><b>Subject:</b> [AusNOG] Network Stress Test Results - Frightening speeds of 900+ mbits<u></u><u></u></span></p>
</div></div><p class="MsoNormal"><span lang="EN-AU"><u></u> <u></u></span></p><p class="MsoNormal">Dear All<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Thought I would share some information on a website called <a href="http://ipstresser.com" target="_blank">ipstresser.com</a> which allows you to stress test your network for free, the downside is the test is under rated and when you choose a 200mbit stress test you actually receive 900mbit + the site also allows you to test up to 32 hosts simultaneously.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">All the information including results and tests can be found here for those interested !<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">
<a href="http://www.micron21.com/network-stress-test" target="_blank">www.micron21.com/network-stress-test</a> <u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Kindest Regards <u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal"><b><span style="font-family:"Verdana","sans-serif"">James Braunegg<br></span></b><b><span style="font-size:8.0pt;font-family:"Verdana","sans-serif"">P:</span></b><span style="font-size:8.0pt;font-family:"Verdana","sans-serif""> 1300 769 972 | <b>M:</b> 0488 997 207 | <b>D:</b> (03) 9751 7616<u></u><u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:8.0pt;font-family:"Verdana","sans-serif"">E:</span></b><span style="font-size:8.0pt;font-family:"Verdana","sans-serif""> </span><span><a href="mailto:james.braunegg@micron21.com" target="_blank"><span style="font-size:8.0pt;font-family:"Verdana","sans-serif"">james.braunegg@micron21.com</span></a></span><span style="font-size:8.0pt;font-family:"Verdana","sans-serif""> | <b>ABN:</b> <a href="tel:12%20109%20977%20666" value="+12109977666" target="_blank">12 109 977 666</a> <br>
<b>W:</b> <a href="http://www.micron21.com/ip-transit" target="_blank"><span>www.micron21.com/ip-transit</span></a> <b>T:</b> @micron21<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Verdana","sans-serif""><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Verdana","sans-serif""><br><img border="0" width="250" height="39" src="cid:image001.jpg@01CECC57.3DD23350" alt="Description: Description: Description: Description: M21.jpg"><br>
</span><span lang="EN-AU" style="font-size:8.0pt;font-family:"Verdana","sans-serif"">This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.</span><span style="font-size:8.0pt;font-family:"Verdana","sans-serif""><u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p></div></div></div></div><br></div></div>_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
<br></blockquote></div><br></div>
<br>_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
<br></blockquote></div><br></div>