[nsp-sec] XO/CenturyLink contacts for recurring attacks to Internap AS14745

[Mike Palladino]

Hi,

Could someone from XO and CenturyLink contact me off-list, please?

We are Internap, and our POP in Atlanta (AS14745) has seen an unusually 
high number of DDoS attacks over the past 36 hours.  Our analytics point 
to fragmented UDP packet-rate attacks as the most common attack vector.

Most of the attack traffic comes in over our XO/AS2828 and 
CenturyLink/AS209 upstream paths.

We are stable at this time, but should another attack occur, we would like 
to work with your respective security teams to trace the malicious data 
back to the source.  If I could get a name/email address of someone to 
work with in case another occurrence happens over the holiday weekend, I 
would appreciate it.

I hope everyone else has a DDoS-free weekend :)

Thanks,
-Mike

---

Mike Palladino | VP, Network and Support
______________________________________

Phone 404.302.9734 . Cell 404.384.6787
mpalladino at internap.com . www.internap.com

INTERNAP
connectivity | colocation | hosting | cloud

One Ravinia Drive . Suite 1300 . Atlanta . GA . 30346