Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app
Jim Shankland wrote: > Also, this jumped out at me: > > "The problem with the recent attack is that the originating IP addresses were > evenly distributed within the IPV4 universe," McAfee says. "This is virtually > impossible using spoofing." > > Am I missing something, or is an even distribution of originating IP addresses > virtually impossible *without* using spoofing? You are correct and McAfee is confused. http://root-servers.org/news/events-of-20151130.txt DNS root name servers that use IP anycast observed this traffic at a significant number of anycast sites. This implies that the botnet was widely distributed. The source addresses of these particular queries appear to be randomized and distributed throughout the IPv4 address space. This says the attackers also used spoofing. Tony. -- f.anthony.n.finchhttp://dotat.at/ Rockall, Malin, Hebrides, Bailey: East 5 to 7, occasionally gale 8 in Rockall. Moderate or rough, occasionally very rough in Rockall. Occasional rain. Good, occasionally poor.
Survey on Middlebox modeling and troubleshooting
Dear All, We are researchers in HP Labs and Duke university. We are currently working on a project related to Middlebox modeling and troubleshooting. We are currently conducting a survey and gathering feedback from operators. Can you help us by providing some answers? Please feel free to email us if you have any additional suggestions. https://www.surveymonkey.com/r/5SFP6G8 Thanks! -Ying
Opinions on Cologix data centers?
Hello; was curious if anyone has opinions on Cologix? Any aspect would be of interest; management, financials, colo quality (power, a/c, etc). The specific facility I'm looking at is their Lakeland FL building which began life under a company called Colo 5 that they purchased; it's only two years old. They seem to have been on a buying spree recently with other colo buildings. Thanks, David
Re: Opinions on Cologix data centers?
I used/inherited them in Montreal after they bought out a series of colos. The corporate management team is good and I would work with them again. They saw themselves as partners and not just a vendor. The local DC manager/team was honest and easy to work with and they were very knowledgeable. The quality of the facility and success of your projects depends in great deal on what they bought and what stage they are at in upgrading it. In my case, the original DC had some design issues they were battling with related to the previous owner + unplanned growth that forced some poor decisions. Cologix did, however, redesign everything and make some major investments in the facility. We saw improvements come out every few months. Oliver On Mon, Dec 14, 2015 at 4:00 PM, David H wrote: > Hello; was curious if anyone has opinions on Cologix? Any aspect would be > of interest; management, financials, colo quality (power, a/c, etc). The > specific facility I'm looking at is their Lakeland FL building which began > life under a company called Colo 5 that they purchased; it's only two years > old. They seem to have been on a buying spree recently with other colo > buildings. > > Thanks, > > David > -- :o@>
Turkey .tr domains un-resolvable over IPv4 ?
Is anyone seeing the same ? I am only able to reach any of the tr. 172800 IN NS ns2.nic.tr. tr. 172800 IN NS ns4.nic.tr. tr. 172800 IN NS ns5.nic.tr. tr. 172800 IN NS ns1.nic.tr. tr. 172800 IN NS ns3.nic.tr. over IPv6 right now , Short time ago traceroute was showing routing loops for ipv4 - www.nic.tr * 27. 144.122.1.21 91.7%12 351.2 351.2 351.2 351.2 0.0* * 28. ??100.0120.0 0.0 0.0 0.0 0.0* * 29. 144.122.1.21 90.0%10 336.2 336.2 336.2 336.2 0.0* * 30. 144.122.1.22 88.9% 9 159.9 159.9 159.9 159.9 0.0* same for ns1.nic.tr : 144.122.95.51 Francesco Ciocchetti -- Mintel Group Ltd | 11 Pilgrim Street | London | EC4V 6RN Registered in England: Number 1475918. | VAT Number: GB 232 9342 72 Contact details for our other offices can be found at http://www.mintel.com/office-locations. This email and any attachments may include content that is confidential, privileged or otherwise protected under applicable law. Unauthorised disclosure, copying, distribution or use of the contents is prohibited and may be unlawful. If you have received this email in error, including without appropriate authorisation, then please reply to the sender about the error and delete this email and any attachments.
bway.net contact?
Would someone from bway.net ISP contact me off list please? Thank you.
Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app
Keep in mind that he is running for President also.
Re: Opinions on Cologix data centers?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi David, We've been in their facility in Dallas for about a year now and have had great luck with them. Very happy with there service. DISCLAIMER: We have our own AS and do not buy bandwidth from them, so I can not attest to their connectivity, but their power and cooling have been consistently awesome. Stu Sheldon ACT USA On 12/14/2015 01:00 PM, David H wrote: > Hello; was curious if anyone has opinions on Cologix? Any aspect would be > of interest; management, financials, colo quality (power, a/c, etc). The > specific facility I'm looking at is their Lakeland FL building which began > life under a company called Colo 5 that they purchased; it's only two years > old. They seem to have been on a buying spree recently with other colo > buildings. > > Thanks, > > David > - -- And you run and you run to catch up with the sun, but its sinking And racing around to come up behind you again The sun is the same in the relative way, but youre older Shorter of breath and one day closer to death -- Pink Floyd - "Time Lyrics" -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJWby+jAAoJEFKVLITDJSGSW6IP/3buhnkulqNEzT5vWQ0Mtwr0 XN0gggjKONQxDKMeiwYQJ1WjrFCg29YavIcq45l/iXDA5qEl+izhYNUrinR4iQf6 X8wYJofxSC/C75C3I2Qd260KC3KjDMEQOb6TcvxAZhCfPDP8lG5cRm7SUwnb48Ke pVEexeRcvOBYQpq9ph0qFx9zGT0ewIJd1jQSWmfM5VZsUOvxCSflhddTV4l5/taW fTg+ensSMuT+kA5/R+92/cqzGT9yUROGJw+uD9zGijeWX0iGC7CxhIP/kXyjoC3S 783/5pc+nPzayJEHdcuhe/onFP7jRv4fGHWhjJDkI/YGBFeB80++zioruIUItRQt ugCYg3I5QLULTVxq6l2o9xpy0nK6c6p+0au7k8ZIkn/ks4K50XhJuRpZfKo3n+zV RzDDCD67QAgThMVi0IRWQYeX/uHt/zO3zTw6kllCuPjlDLlCPM6iNPmOLolooDbL QXy4BANHz1HOVk89BRBU8Lqh2Zp2HHlSA9+Q4HeJ8nQul4FfQxmuV+k09Aajigur Xaklko4WP9Qusl4trlfGKoHXPBxjjyYVw8Mb+THZu1erQVCy/5kvya8OtrBMm03I d3t3I2EwH5/uL/dLaLOpIMDbd2KrAzjVf8+KxYonTTFa2uJzsRuZ20f6x2aUt4QF DYCTU5qExQbxWiwBWXrY =tUS6 -END PGP SIGNATURE-
Re: Turkey .tr domains un-resolvable over IPv4 ?
I was told this was done due to a DDoS attack that originated outside turkey. I have been unable to locate someone with enough details that they could be assisted to bring this back online. We did look into traffic patterns on-network and saw attack traffic prior to the routes going away but without a route it’s much harder to assist. Anyone at nic.tr or RIPE that has been working this is welcome to contact me off-list for assistance. I’m actually quite surprised it took so many hours to make NANOG, and hasn’t yet made the DNS-operations list. - Jared > On Dec 14, 2015, at 8:33 AM, Francesco Ciocchetti > wrote: > > Is anyone seeing the same ? > > I am only able to reach any of the > > tr. 172800 IN NS ns2.nic.tr. > tr. 172800 IN NS ns4.nic.tr. > tr. 172800 IN NS ns5.nic.tr. > tr. 172800 IN NS ns1.nic.tr. > tr. 172800 IN NS ns3.nic.tr. > > over IPv6 right now , > > Short time ago traceroute was showing routing loops for ipv4 - www.nic.tr > > * 27. 144.122.1.21 91.7%12 351.2 351.2 > 351.2 351.2 0.0* > * 28. ??100.0120.0 0.0 > 0.0 0.0 0.0* > * 29. 144.122.1.21 90.0%10 336.2 336.2 > 336.2 336.2 0.0* > * 30. 144.122.1.22 88.9% 9 159.9 159.9 > 159.9 159.9 0.0* > > same for ns1.nic.tr : 144.122.95.51 > > > Francesco Ciocchetti > > -- > > Mintel Group Ltd | 11 Pilgrim Street | London | EC4V 6RN > Registered in England: Number 1475918. | VAT Number: GB 232 9342 72 > > Contact details for our other offices can be found at > http://www.mintel.com/office-locations. > > This email and any attachments may include content that is confidential, > privileged > or otherwise protected under applicable law. Unauthorised disclosure, > copying, distribution > or use of the contents is prohibited and may be unlawful. If you have > received this email in error, > including without appropriate authorisation, then please reply to the > sender about the error > and delete this email and any attachments.
