<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div>
<div>
<div><font face="Calibri,sans-serif">Is it possible that the user is multi-homed, and their other upstream is having them null routed to some upstreams? I’ve seen this happen before in this kind of scenario.</font></div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div><br>
</div>
<div>-- </div>
<div>
<div style="font-family: Calibri; font-size: medium;">
<p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; color: rgb(127, 127, 127);">Kind regards,</span><span style="font-size: 11pt;"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; line-height: 12pt;">
<b><span style="font-size: 10.5pt; font-family: Helvetica, sans-serif;">Barry Murphy</span></b><span style="font-size: 10.5pt; font-family: Helvetica, sans-serif;"> / </span><b><span style="font-size: 10.5pt; font-family: Helvetica, sans-serif; color: rgb(255, 158, 1);">Chief
Operating Officer</span></b><span style="font-size: 10.5pt; font-family: Helvetica, sans-serif;"><br>
</span></p>
</div>
<div style="font-family: Calibri; font-size: medium;"></div>
</div>
</div>
</div>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<span id="OLK_SRC_BODY_SECTION" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Shannon Gernyi <<a href="mailto:shannon.gernyi@xsv.com.au">shannon.gernyi@xsv.com.au</a>><br>
<span style="font-weight:bold">Date: </span>Thursday, 18 December 2014 4:26 pm<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a>" <<a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a>><br>
<span style="font-weight:bold">Subject: </span>[AusNOG] DDoS impacting some Oz providers into Black Lotus LA?<br>
</div>
<div><br>
</div>
<div>
<div>
<div style="font-family: times new roman, new york, times, serif; font-size: 12pt; color: #000000">
<div>Hi Noggers,</div>
<div><br>
</div>
<div>It's a bit of a broad query at this stage, but I wanted to throw the question out there as we're seeing some interesting happenings when offloading traffic via Black lotus (US).</div>
<div><br>
</div>
<div>DDoS appears to get scrubbed, but we're suddenly unable to access the victim's site from certain providers (iiNet, Exetel...), but can get there fine from others (Telstra). I don't have a lot of diagnostic information just yet, just wanted to query if
anyone else is seeing similar issues or aware of anything. Trace stops before entering Black lotus from affected ISPs.</div>
<div><br>
</div>
<div>Kind Regards,</div>
<div><br>
</div>
<div>Shannon</div>
</div>
</div>
</div>
</span>
</body>
</html>