nanog mailing list archives

Re: DOS attack from PANAMSAT


From: Rob Thomas <robt () cymru com>
Date: Sat, 6 Jul 2002 18:24:40 -0500 (CDT)


Hello, Frank.

] Your upstreams, who will help you back-track.  Nobody DoS'es with their
] real IP's anymore.

Hmm, not according to the data I collect.  I track numerous botnets and
DoSnets, and a bit over 80% of them use the real IPs as the source of
the floods.  Then again, with 500 - 18000 bots, it isn't all that
necessary to mask the source IPs.  :/

Just my $.02, of course.

Thanks,
Rob.
-- 
Rob Thomas
http://www.cymru.com
ASSERT(coffee != empty);



Current thread: