nanog mailing list archives
Re: DDoS Attacks Cause of Game Servers
From: Jeroen Massar <jeroen () massar ch>
Date: Thu, 31 Jan 2013 08:36:51 +0100
On 2013-01-31 08:04 , Shahab Vahabzadeh wrote:
Hi everybody, Last two days I was under an interesting attack which comes from multiple sources to three of my ADSL users destination.
You say that it comes from multiple sources to 3 of your DSL users. The below source/dest though shows that the destination is from CERN in Switzerland, you know the people who build black holes ;) The IP does not ping at the moment, but the whois indicates 'dyn' in the netname thus that is not too unsurprising.
The attack make router to ran out of CPU and we had to reload it to solve. I ask those three users and they said we are only game players and all of them were kids, I think they told the true, they told we are playing: http://intl.garena.com/
Looks not like a game, just another messenger / IM client.
Attacks takes only 20 or 30 minutes and it happens only 4 times in two days. I could'nt capture any packet but this is out put of my "show ip accounting" that time:
You'll be needing a bit more info than that... and 117 packets with a total of 5148 bytes is not a lot of traffic to put anything down (unless it is a targeted attack) You might though contact the CERN NOC, if you really think something is funny there. Timestamps might be very useful to provide though, especially if the IP is really dynamic. Greets, Jeroen
Current thread:
- DDoS Attacks Cause of Game Servers Shahab Vahabzadeh (Jan 30)
- Re: DDoS Attacks Cause of Game Servers clayton (Jan 30)
- Re: DDoS Attacks Cause of Game Servers John Kristoff (Jan 31)
- Re: DDoS Attacks Cause of Game Servers Jeroen Massar (Jan 31)
- Re: DDoS Attacks Cause of Game Servers Shahab Vahabzadeh (Jan 30)
- Re: DDoS Attacks Cause of Game Servers Stephane Bortzmeyer (Jan 31)
- Re: DDoS Attacks Cause of Game Servers Fredrik Holmqvist / I2B (Jan 31)
- Re: DDoS Attacks Cause of Game Servers Jeroen Massar (Jan 31)
- Re: DDoS Attacks Cause of Game Servers Shahab Vahabzadeh (Jan 30)