[Outages-discussion] NeuStar UltraDNS ? ** Why DDOS Neustar?

[David Conrad]

On Jul 12, 2012, at 9:01 AM, Patrick W. Gilmore wrote:
> Also, related to David's comments: The attacker almost certainly does not have bots in every eyeball network.  

Hard to say without more information. I have been surprised in the past at how effectively botnets have penetrated networks, particularly ones with lots of end users at the end.

> If China Telecom is attacking you and you have a widely distributed deployment, then only the node close to CT is affected. The rest of the world doesn't know an attack is happening.  

I haven't heard of bots that care that the traffic they are originating only comes from particular ASes, but I'm not in the secret cabals where that sort of information is shared so I may be surprised (again).

Regards,
-drc