nanog mailing list archives

Re: Reaching out to Sony NOC, resolving DDoS Issues - Need POC


From: "Dobbins, Roland" <Roland.Dobbins () netscout com>
Date: Tue, 28 Jan 2020 11:28:32 +0000


On 28 Jan 2020, at 18:15, Octolus Development wrote:

The problem is that they are spoofing our IP, to millions of IP's 
running port 80.

So that does in fact sound like a TCP reflection/amplification attack.

If you have the relevant information, as it seems that you do, you can 
ask operators to perform traceback (they'll likely need timestamps).

Hopefully, some operators will read this thread and begin looking into 
it, as well.

--------------------------------------------
Roland Dobbins <roland.dobbins () netscout com>


Current thread: