Re: ARIN down?

[Mel Beckman <mel () beckman org>]

I’m sure we all sympathize with the workload a DDOS attack imposes, as most of us have been there. But I can’t 
understand why there is so little broadcast communication of the attack through multiple channels. 
lists.arin.net<http://lists.arin.net> is rather esoteric. Facebook and Twitter are obvious alternative channels that 
are hard to attack, yet both are silent on the subject:

https://www.facebook.com/TeamARIN/
https://twitter.com/teamarin

Google shows only four hits for “arin dos attack march 25 2016”, and those are only fragments of the 
lists.arin.net<http://lists.arin.net> announcement, all of which dead end at arin.net<http://arin.net> right now.

It’s creepy that a major chunk of Internet infrastructure can be down for so long with so little public notice.

 -mel

On Mar 25, 2016, at 9:57 PM, Bill Woodcock <woody () pch net<mailto:woody () pch net>> wrote:


On Mar 25, 2016, at 9:43 PM, Mel Beckman <mel () beckman org<mailto:mel () beckman org>> wrote:

I haven’t been able to connect to http://arin.net for several hours
I recall ARIN had a DDoS attack a week or so ago. Does anybody know if this is a recurrence?

Yes, it is.  I attach Mark’s notice about it from this afternoon.

                               -Bill



Begin forwarded message:

From: ARIN <info () arin net<mailto:info () arin net>>
Subject: [arin-announce] ARIN DDoS Attack
Date: March 25, 2016 at 1:31:34 PM PDT
To: arin-announce () arin net<mailto:arin-announce () arin net>

Starting at 3:55 PM EDT on Friday, 25 March, a DDoS attack began against ARIN. This was and continues to be a sustained 
attack against our provisioning services, email, and website. We initiated our DDoS mitigation plan and are in the 
process of mitigating various types of attack traffic patterns. All our other public-facing services (Whois, Whois-RWS, 
RDAP, DNS, IRR, and RPKI repository services) are not affected by this attack and are operating normally.

We will announce an all clear 24 hours after the attacks have stopped.

Regards,

Mark Kosters
Chief Technology Officer
American Registry for Internet Numbers (ARIN)