[AusNOG] NTP reflection used for world's largest DDoS

[Jayden]

Three Syllables: AWS. Or even vanilla vps hosts, there are enough cheap ones
out there to grasp a few hundred and destroy them before anyone is the
wiser. To sustain the attack you'd need some /very/ dodgy upstreams. (enzu
*cough*)

 

From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Joshua
D'Alton
Sent: Tuesday, 11 February 2014 9:40 PM
To: Dobbins, Roland
Cc: ausnog at lists.ausnog.net
Subject: Re: [AusNOG] NTP reflection used for world's largest DDoS

 

In OP case yes, but just saying were someone like Scott Weeks wish to
perform said attack, they could probably do it with just 7 servers as
previously mentioned. Or maybe even a single 10Gbit server, though
aforementioned 'dodgy' providers don't do 10Gbit that cheap. That is part of
the scariness of these sorts of attacks, they are a lot easier to carry out
with minimal knowledge and funds (comparatively).

 

On Tue, Feb 11, 2014 at 9:41 PM, Dobbins, Roland <rdobbins at arbor.net
<mailto:rdobbins at arbor.net> > wrote:


On Feb 11, 2014, at 1:47 PM, Joshua D'Alton <joshua at railgun.com.au
<mailto:joshua at railgun.com.au> > wrote:

> Though, 7 x 1Gbps full linerate servers with a provider who won't complain
about the usage would only cost about $2000AUD per month.

The servers are likely compromised, and there are likely more than seven.


-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net <mailto:rdobbins at arbor.net> > //
<http://www.arbornetworks.com>

          Luck is the residue of opportunity and design.

                       -- John Milton

_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net <mailto:AusNOG at lists.ausnog.net> 
http://lists.ausnog.net/mailman/listinfo/ausnog

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140211/f77f71cb/attachment.html>