From: ポール・ロラン (Paul)
Date: Wed Nov 26 2008 - 06:14:18 EST
On Wed, 26 Nov 2008 05:37:59 -0500
Pete Templin <> wrote:
> One of my customers, a host at 220.127.116.11, is feeling a "bonus"
> ~130kpps from 18.104.22.168. I've null-routed the source, though our
> Engine2 GE cards don't seem to be doing a proper job of that,
> unfortunately. The attack is a solid 300% more pps than our aggregate
> traffic levels.
> It's coming in via 6461, but they don't appear to have any ability to
> backtrack it. Their only offer is to blackhole the destination until
> the attack subsides. BGP tells me the source is in AS 12322, a RIPE AS
> that has little if any information publicly visible.
12322 is Free, a DSL (and now FTTH) provider in France. They also have
a dedicated server hosting service.
22.214.171.124 is one of these dedicated server that is hosted in one of their
traceroute to 126.96.36.199 (188.8.131.52), 30 hops max, 60 byte packets
7 10ge-1-50.bzn-swr5.dedibox.fr (184.108.40.206) 353.946 ms 334.180 ms 336.400 ms
8 sd-11899.dedibox.fr (220.127.116.11) 338.403 ms 374.956 ms 376.837 ms
I thought these were supposed to be connected at 100MBps, but if you see
more than that, then it is possible that they are now connected thru a GBps
You can try to contact the dedibox NOC, and Free :
can be a nice place to start...
> Any pointers on what to do next?
-- Paul Rolland E-Mail : rol(at)witbe.net CTO - Witbe.net SA Tel. +33 (0)1 47 67 77 77 Les Collines de l'Arche Fax. +33 (0)1 47 67 77 99 F-92057 Paris La Defense RIPE : PR12-RIPE Please no HTML, I'm not a browser - Pas d'HTML, je ne suis pas un navigateur "Some people dream of success... while others wake up and work hard at it" All I need to have a good time, Is a reefer, a woman and a bottle of wine. With those three things I don't need no sunshine, A reefer, a woman and a bottle of wine. All I want is to never grow old, I want to wash in a bathtub of gold. I want 97 kilos already rolled, I want to wash in a bathtub of gold. I want to light my cigars with 10 dollar bills, I like to have a cattle ranch in Beverly Hills. I want a bottle of Red Eye that's always filled, I like to have a cattle ranch in Beverly Hills. -- Country Joe and the Fish, "Zachariah"