[AusNOG] Telstra contact - DDoS

[Chris Legg]

Hi Jared

He has tried disconnecting for 12 hours but obtained the same IP on 
re-connection.
He suspects DDoS attack based on the log file 
(https://www.dropbox.com/s/3t4zj4ds8zyk4eb/log.txt?dl=0).
Firewall is on, ICMP is off.

Thanks
Chris

On 4/06/2017 4:06 PM, Jared Hirst wrote:
> Hi Chris,
>
> A static IP would make the situation worse. Can the EU disconnect and 
> get a new IP via their provider?
>
> What makes them think that this is a DDoS attack?
>
> Have they tried turning their firewall on in their router? Most likely 
> won't help, but a good start if it's a small script kiddy attack.
>
> Cheers,
>
> Jared
>
> On Sun, Jun 4, 2017 at 5:53 PM, Chris Legg <cdlegg at iinet.net.au 
> <mailto:cdlegg at iinet.net.au>> wrote:
>
>     Hi all
>
>     Would anyone from Telstra be able to help a colleague of mine with
>     what appears to be a DDoS attack on his residential HFC connection
>     please?
>
>     Tried calling support and after 10 minutes of trying to explain
>     the situation they suggested speaking to the billing department
>     (not open weekends of course) to get a static IP!
>
>     Thanks in advance
>     Chris
>
>
>     _______________________________________________
>     AusNOG mailing list
>     AusNOG at lists.ausnog.net <mailto:AusNOG at lists.ausnog.net>
>     http://lists.ausnog.net/mailman/listinfo/ausnog
>     <http://lists.ausnog.net/mailman/listinfo/ausnog>
>
>
>
>
>
> Learn More... 
> <http://signature.serversaustralia.com.au/uc/58247fb50e0f756394ef223c>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20170604/85fb9d8f/attachment.html>