Re: cloudflare hosting a ddos service?

2016-07-26 Thread Steve Atkins
> On Jul 26, 2016, at 7:58 PM, Justin Paine wrote: > > Folks, > > "For a long time their abuse@ alias was (literally) routed to /dev/null. I'm > not > sure whether that's still the case or whether they now ignore reports > manually." > > @Steve It (literally) never was. :) Yes, it was. Th

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Paras Jha
I read through the blog post, and it was an interesting window into how Cloudflare operates. If I could be so bold as to raise this issue, however - Specifically, this part *Originally, when we would receive reports of phishing or malware we would terminate the customers immediately. The challeng

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Paras Jha
Justin, The only problem with that statement is that it's not true: if you did terminate service to them, the websites would go away. Maybe not today, but eventually. "Network stresser" owners are notorious for trying to take out the competition. Cloudflare provides free protection for these servi

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Mike
On 07/26/2016 07:42 PM, Paras Jha wrote: A five minute Google search revealed this, which is just the tip of the iceberg booter.xyz exitus.to zstress.net critical-boot.com instress.club webstresser.co anonymousstresser.com rawdos.com kronosbooter.com alphastress.com synergy.so str3ssed.me layer7

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Eric Kuhnke
Looks like barrier to obtaining an EV SSL certificate is not very high these days. There's documentation requirements, but root CAs can't be seen to discriminate against companies in the developing world. I suppose all you need is a scanned business license/incorporation documents from your local

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Paras Jha
A five minute Google search revealed this, which is just the tip of the iceberg booter.xyz exitus.to zstress.net critical-boot.com instress.club webstresser.co anonymousstresser.com rawdos.com kronosbooter.com alphastress.com synergy.so str3ssed.me layer7.pw There are probably hundreds On Tue,

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Larry Sheldon
On 7/26/2016 21:19, jim deleskie wrote: Back in the day didn't we refer to such hosting as bulletproof hosting? Not HERE! NANA-E, sure. -- "Everybody is a genius. But if you judge a fish by its ability to climb a tree, it will live its whole life believing that it is stupid." --Albert E

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Steve Atkins
> On Jul 26, 2016, at 7:15 PM, Mehmet Akcin wrote: > > Have you tried to contact their Abuse?. For a long time their abuse@ alias was (literally) routed to /dev/null. I'm not sure whether that's still the case or whether they now ignore reports manually. Cheers, Steve > > mehmet > > On Tu

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Ethan
So vbooter.org's dns and web is hosted by cloudflare? "Using vBooter you can take down home internet connections, websites and game servers such us Minecraft, XBOX Live, PSN and many more." Buy some time on it to DDoS cloudflare sites.

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Paras Jha
This is quite common, almost all of the DDoS-for-hire services are hosted behind CloudFlare, and a great majority of them take PayPal. Another one had even managed to secure an EV SSL cert. On Tue, Jul 26, 2016 at 10:24 PM, Dovid Bender wrote: > I used to have a boss that was convinced that MCaf

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Dovid Bender
I used to have a boss that was convinced that MCafee was writing viruses to stay in business Regards, Dovid -Original Message- From: Phil Rosenthal Sender: "NANOG" Date: Tue, 26 Jul 2016 22:17:53 To: jim deleskie Cc: NANOG list Subject: Re: cloudflare hosting a ddos service? Plu

Re: cloudflare hosting a ddos service?

2016-07-26 Thread jim deleskie
Back in the day didn't we refer to such hosting as bulletproof hosting? On Tue, Jul 26, 2016 at 11:17 PM, Phil Rosenthal wrote: > Plus, it’s good for business! > > -Phil > > > On Jul 26, 2016, at 10:14 PM, jim deleskie wrote: > > > > sigh... > > > > On Tue, Jul 26, 2016 at 10:55 PM, Patrick W.

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Phil Rosenthal
Plus, it’s good for business! -Phil > On Jul 26, 2016, at 10:14 PM, jim deleskie wrote: > > sigh... > > On Tue, Jul 26, 2016 at 10:55 PM, Patrick W. Gilmore > wrote: > >> CloudFlare will claim they are not hosting the problem. They are just >> hosting the web page that lets you pay for or po

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Mehmet Akcin
Have you tried to contact their Abuse?. mehmet On Tue, Jul 26, 2016 at 6:49 PM, Mike wrote: > Hi, > > So vbooter.org's dns and web is hosted by cloudflare? > > "Using vBooter you can take down home internet connections, websites and > game servers such us Minecraft, XBOX Live, PSN and many

Re: cloudflare hosting a ddos service?

2016-07-26 Thread jim deleskie
sigh... On Tue, Jul 26, 2016 at 10:55 PM, Patrick W. Gilmore wrote: > CloudFlare will claim they are not hosting the problem. They are just > hosting the web page that lets you pay for or points at or otherwise > directs you to the problem. > > The actual source of packets is some other IP addre

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Patrick W. Gilmore
CloudFlare will claim they are not hosting the problem. They are just hosting the web page that lets you pay for or points at or otherwise directs you to the problem. The actual source of packets is some other IP address. Therefore, they can keep hosting the web page. It is not sending the actu

cloudflare hosting a ddos service?

2016-07-26 Thread Mike
Hi, So vbooter.org's dns and web is hosted by cloudflare? "Using vBooter you can take down home internet connections, websites and game servers such us Minecraft, XBOX Live, PSN and many more." dig -t ns vbooter.org ; <<>> DiG 9.9.5-3ubuntu0.8-Ubuntu <<>> -t ns vbooter.org ;; global

Re: I recommend dslreports.com/speedtest these days (was Speedtest.net not accessible in Chrome due to deceptive ads)

2016-07-26 Thread Jim Gettys
Some additional comments from Dave Taht, who does not subscribe to the nanog list. Also note the early WiFi results, which are spectacular. Your customers will have bufferbloat both due to the ISP, and due to the WiFi hop that is usually between them and their home router. Unfortunately, it's go

Re: Clueful BGP from TW-Telecom/L3

2016-07-26 Thread Micah Croff
Last I dealt with TW Telecom and BGP we had to explain to them that putting in a static route on both routers on top of BGP was not desired. Then they reconfigured a circuit 30 miles away when trying to turn it up again causing an outage in our data center. Sorry, not super hopeful when it comes