[AusNOG] NTP Reflection coming in over Equinix IX

[Mark Dignam]

Ouch..

 

We are actually being subject to a NTP DDOS right now. with about half the
data coming over our WAIX link.

 

Most are iinet & internode end points, I'll collect the IP's and pass them
on... 

 

Mark.

 

From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Sean K.
Finn
Sent: Thursday, 13 February 2014 12:37 PM
To: ausnog at lists.ausnog.net
Subject: [AusNOG] NTP Reflection coming in over Equinix IX

 

Hey All,

 

I never thought I'd see the day, we're seeing local NTP Reflection attacks
come in across Equinix peering!

 

Thankfully they are very small amounts of traffic but you can see the
traffic jump percentage wise.

 



 

 

Does anyone have any mitigation stategies across the Equinix IX . (Apart
from obvious, i.e. contacting the peer AS's to asking them to nice mitigate
at their end and pray, or droping prefix from Equinix completely.)

 

PS Anyone else on Equinix Syd if you're smashing outbound on NTP please
check J

 

 

This is the first time we've seen reflection attack across peering!

 

What I once considered safe harbour has now been compromised.

 

Kind Regards,

Sean Finn,

Oz Servers.

 

 

  _____  

Premium Australian Hosting Solution Specialists

  _____  


Sean Finn, BInfTech(NetSys)Qld.UT

Oz Servers
e:  <mailto:sean.finn at ozservers.com.au> sean.finn at ozservers.com.au
w:  <http://www.ozservers.com.au/> http://www.ozservers.com.au
p: 1300 13 89 69 

 

 

ozlogo

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140213/39dd9b6b/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 23838 bytes
Desc: not available
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140213/39dd9b6b/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.gif
Type: image/gif
Size: 2556 bytes
Desc: not available
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140213/39dd9b6b/attachment-0001.gif>