<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:black;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:black'>Dear All<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:black'>I found a very sexy stats page if you’re interested about prolexic services<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:black'><a href="http://www.prolexic.com/plxpatrol/index.html">http://www.prolexic.com/plxpatrol/index.html</a><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:black'>Very interesting to see the attack type break down over the last 30 days / all time for those like me who love network security ;-)<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:black'>Kindest Regards<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p><div><p class=MsoNormal><b><span style='font-family:"Verdana","sans-serif";color:black'>James Braunegg<br></span></b><b><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'>P:</span></b><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'> 1300 769 972 | <b>M:</b> 0488 997 207 | <b>D:</b> (03) 9751 7616</span><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><b><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'>E:</span></b><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'> </span><span style='color:black'><a href="mailto:james.braunegg@micron21.com"><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'>james.braunegg@micron21.com</span></a></span><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'> | <b>ABN:</b> 12 109 977 666 <br><b>W:</b> <a href="http://www.micron21.com/ddos-protection"><span style='color:black'>www.micron21.com/ddos-protection</span></a> <b>T:</b> @micron21<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'><br><img border=0 width=250 height=39 id="Picture_x0020_1" src="cid:image001.jpg@01CF111D.A8711220" alt="Description: Description: Description: Description: M21.jpg"><br></span><span lang=EN-AU style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'>This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.</span><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'><o:p></o:p></span></p></div><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> AusNOG [mailto:ausnog-bounces@lists.ausnog.net] <b>On Behalf Of </b>James Braunegg<br><b>Sent:</b> Tuesday, January 14, 2014 11:34 AM<br><b>To:</b> Mark Tees; Frank Lin<br><b>Cc:</b> ausnog@lists.ausnog.net<br><b>Subject:</b> Re: [AusNOG] Routing issues with IINet and Telstra to www.optionsxpress.com.au<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoPlainText>Dear All<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>This is normal behavior routing traffic via AS32787 - Prolexic Technologies <o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>The second last hop on each trace 209.200.136.34 is the scrubbing center which then provides a GRE tunnel back to the original network <o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>Kindest Regards<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoNormal><b><span style='font-family:"Verdana","sans-serif";color:black'>James Braunegg<br></span></b><b><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'>P:</span></b><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'> 1300 769 972 | <b>M:</b> 0488 997 207 | <b>D:</b> (03) 9751 7616<o:p></o:p></span></p><p class=MsoNormal><b><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'>E:</span></b><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'> </span><span style='color:black'><a href="mailto:james.braunegg@micron21.com"><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'>james.braunegg@micron21.com</span></a></span><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'> | <b>ABN:</b> 12 109 977 666 <br><b>W:</b> <a href="http://www.micron21.com/ip-transit"><span style='color:black'>www.micron21.com/ip-transit</span></a> <b>T:</b> @micron21<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'><br><img border=0 width=250 height=39 id="Picture_x0020_4" src="cid:image001.jpg@01CF111D.A8711220" alt="Description: Description: Description: Description: M21.jpg"><br></span><span lang=EN-AU style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'>This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.</span><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoPlainText>-----Original Message-----<br>From: AusNOG [mailto:ausnog-bounces@lists.ausnog.net] On Behalf Of Mark Tees<br>Sent: Tuesday, January 14, 2014 11:04 AM<br>To: Frank Lin<br>Cc: ausnog@lists.ausnog.net<br>Subject: Re: [AusNOG] Routing issues with IINet and Telstra to www.optionsxpress.com.au<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>Judging from other posts the destination network is probably receiving DDOS traffic at present.<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>The funny looking routes towards the host are attempts at guiding traffic in through certain routes for scrubbing/mitigation.<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>Given there is a Prolexic hop mentioned there things will hopefully come under control soon :)<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>On 14 Jan 2014, at 10:45 am, Frank Lin <<a href="mailto:TwinMonkeys.Enterprises@gmail.com"><span style='color:windowtext;text-decoration:none'>TwinMonkeys.Enterprises@gmail.com</span></a>> wrote:<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>> Hi Noggers,<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> I am seeing some routing issues to <a href="http://www.optionsxpress.com.au"><span style='color:windowtext;text-decoration:none'>www.optionsxpress.com.au</span></a> especially from IInet and Telstra.<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> Are you able confirm?<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> Thanks<o:p></o:p></p><p class=MsoPlainText>> Frank<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> IInet route:<o:p></o:p></p><p class=MsoPlainText>> traceroute <a href="http://www.optionsxpress.com.au"><span style='color:windowtext;text-decoration:none'>www.optionsxpress.com.au</span></a><o:p></o:p></p><p class=MsoPlainText>> Tracing the route to <a href="http://www.wip.optionsxpress.com.au"><span style='color:windowtext;text-decoration:none'>www.wip.optionsxpress.com.au</span></a> (114.141.73.68)<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> 1 gi0-18.syd-ult-svc1.iinet.net.au (203.215.16.47) [AS 4802] 4 msec 4 msec 0 msec<o:p></o:p></p><p class=MsoPlainText>> 2 gi2-7.syd-ult-bdr2.iinet.net.au (203.215.16.7) [AS 4802] 0 msec 0 msec 0 msec<o:p></o:p></p><p class=MsoPlainText>> 3 po3-100.syd-ult-bdr1.on.ii.net (203.215.20.146) [AS 4802] [MPLS: Label 376 Exp 0] 0 msec 4 msec 0 msec<o:p></o:p></p><p class=MsoPlainText>> 4 ae2.syd-ult-core1.on.ii.net (203.215.20.30) [AS 4802] 0 msec 0 msec 0 msec<o:p></o:p></p><p class=MsoPlainText>> 5 xe-7-0-10-10.br1.syd7.on.ii.net (150.101.33.112) [AS 4739] 0 msec 0 msec 0 msec<o:p></o:p></p><p class=MsoPlainText>> 6 ae0.br1.syd4.on.ii.net (150.101.33.14) [AS 4739] [MPLS: Label 319984 Exp 0] 0 msec 24 msec 32 msec<o:p></o:p></p><p class=MsoPlainText>> 7 te0-2-0.bdr1.hkg2.on.ii.net (150.101.33.199) [AS 4739] 112 msec 112 msec 112 msec<o:p></o:p></p><p class=MsoPlainText>> 8 * * * <o:p></o:p></p><p class=MsoPlainText>> 9 * * * <o:p></o:p></p><p class=MsoPlainText>> 10 * * * <o:p></o:p></p><p class=MsoPlainText>> 11 * * * <o:p></o:p></p><p class=MsoPlainText>> 12 * * * <o:p></o:p></p><p class=MsoPlainText>> 13 * * * <o:p></o:p></p><p class=MsoPlainText>> 14 * * * <o:p></o:p></p><p class=MsoPlainText>> 15 * * * <o:p></o:p></p><p class=MsoPlainText>> 16 * * * <o:p></o:p></p><p class=MsoPlainText>> 17 * * * <o:p></o:p></p><p class=MsoPlainText>> 18 * * * <o:p></o:p></p><p class=MsoPlainText>> 19 * * * <o:p></o:p></p><p class=MsoPlainText>> 20 * * * <o:p></o:p></p><p class=MsoPlainText>> 21 * * * <o:p></o:p></p><p class=MsoPlainText>> 22 * * * <o:p></o:p></p><p class=MsoPlainText>> 23 * * * <o:p></o:p></p><p class=MsoPlainText>> 24 * * * <o:p></o:p></p><p class=MsoPlainText>> 25 * * * <o:p></o:p></p><p class=MsoPlainText>> 26 * <o:p></o:p></p><p class=MsoPlainText>> 114.141.73.68 [AS 32787] 204 msec * <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> Telstra route (not even close):<o:p></o:p></p><p class=MsoPlainText>> 1 gigabitethernet3-3.exi1.melbourne.telstra.net (203.50.77.49) 0.310 ms 0.280 ms 0.243 ms<o:p></o:p></p><p class=MsoPlainText>> 2 bundle-ether3.exi-core1.melbourne.telstra.net (203.50.80.1) 0.869 ms 3.298 ms 4.117 ms<o:p></o:p></p><p class=MsoPlainText>> 3 bundle-ether12.chw-core2.sydney.telstra.net (203.50.11.74) 16.486 ms 15.417 ms 15.985 ms<o:p></o:p></p><p class=MsoPlainText>> 4 bundle-ether1.oxf-gw2.sydney.telstra.net (203.50.6.90) 17.734 ms 17.166 ms 15.985 ms<o:p></o:p></p><p class=MsoPlainText>> 5 203.50.9.42 (203.50.9.42) 19.234 ms 19.417 ms 15.986 ms<o:p></o:p></p><p class=MsoPlainText>> 6 i-0-2-0-5.sydo-core02.bi.telstraglobal.net (202.84.223.42) 16.484 ms 19.289 ms 15.986 ms<o:p></o:p></p><p class=MsoPlainText>> 7 i-0-2-0-5.1wlt-core01.bx.telstraglobal.net (202.84.140.202) 160.775 ms<o:p></o:p></p><p class=MsoPlainText>> i-0-2-0-1.1wlt-core01.bx.telstraglobal.net (202.84.249.50) 158.460 ms<o:p></o:p></p><p class=MsoPlainText>> i-0-2-0-8.1wlt-core01.bx.telstraglobal.net (202.84.143.154) 161.086 ms<o:p></o:p></p><p class=MsoPlainText>> 8 i-0-4-0-0.eqla01.bi.telstraglobal.net (202.84.251.174) 158.710 ms<o:p></o:p></p><p class=MsoPlainText>> i-0-4-0-2.eqla01.bi.telstraglobal.net (202.40.149.242) 158.210 ms<o:p></o:p></p><p class=MsoPlainText>> i-0-4-0-0.eqla01.bi.telstraglobal.net (202.84.251.174) 157.463 ms<o:p></o:p></p><p class=MsoPlainText>> 9 *<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> TPG route (good):<o:p></o:p></p><p class=MsoPlainText>> 1 syd-sot-ken-crs1-Te-0-4-0-1.tpgi.com.au (203.29.135.42) 0 msec 8 msec 8 msec<o:p></o:p></p><p class=MsoPlainText>> 2 203-26-22-113.static.tpgi.com.au (203.26.22.113) [MPLS: Label 21 Exp 0] 0 msec 0 msec 0 msec<o:p></o:p></p><p class=MsoPlainText>> 3 202.7.171.229 4 msec 0 msec 4 msec<o:p></o:p></p><p class=MsoPlainText>> 4 prolexic-10G.hkix.net (202.40.161.26) 116 msec 112 msec 116 msec<o:p></o:p></p><p class=MsoPlainText>> 5 209.200.136.34 [AS 32787] 112 msec 116 msec 112 msec<o:p></o:p></p><p class=MsoPlainText>> 6 <a href="http://www.wip.optionsxpress.com.au"><span style='color:windowtext;text-decoration:none'>www.wip.optionsxpress.com.au</span></a> (114.141.73.67) [AS 32787] 116 msec 112 msec 112 msec<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> _______________________________________________<o:p></o:p></p><p class=MsoPlainText>> AusNOG mailing list<o:p></o:p></p><p class=MsoPlainText>> <a href="mailto:AusNOG@lists.ausnog.net"><span style='color:windowtext;text-decoration:none'>AusNOG@lists.ausnog.net</span></a><o:p></o:p></p><p class=MsoPlainText>> <a href="http://lists.ausnog.net/mailman/listinfo/ausnog"><span style='color:windowtext;text-decoration:none'>http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>_______________________________________________<o:p></o:p></p><p class=MsoPlainText>AusNOG mailing list<o:p></o:p></p><p class=MsoPlainText><a href="mailto:AusNOG@lists.ausnog.net"><span style='color:windowtext;text-decoration:none'>AusNOG@lists.ausnog.net</span></a><o:p></o:p></p><p class=MsoPlainText><a href="http://lists.ausnog.net/mailman/listinfo/ausnog"><span style='color:windowtext;text-decoration:none'>http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><o:p></o:p></p></div></body></html>