<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>FYI a pretty weak but publicly referencable acknowledgement of
      whats going on</p>
    <p><a class="moz-txt-link-freetext" href="https://www.bandwidth.com/blog/a-message-to-our-customers-and-partners/">https://www.bandwidth.com/blog/a-message-to-our-customers-and-partners/</a></p>
    <p><br>
    </p>
    <div class="moz-cite-prefix">On 9/29/2021 10:37 AM, Pete Eisengrein
      wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CAHm=SaKR5SRhgC4_q9uAts+Mh=3WmgrTCSQkriQ4MVOLDa0y1g@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">They have publicly acknowledge it as a DDoS ( <a
href="https://www.bandwidth.com/blog/a-message-to-our-customers-and-partners/"
          moz-do-not-send="true">https://www.bandwidth.com/blog/a-message-to-our-customers-and-partners/</a>
        ) , but being pretty tight-lipped with specifics on what it is
        or how they are mitigating. </div>
      <br>
      <div class="gmail_quote">
        <div dir="ltr" class="gmail_attr">On Wed, Sep 29, 2021 at 12:29
          PM Carlos Alvarez <<a href="mailto:caalvarez@gmail.com"
            moz-do-not-send="true">caalvarez@gmail.com</a>> wrote:<br>
        </div>
        <blockquote class="gmail_quote" style="margin:0px 0px 0px
          0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
          <div dir="ltr">Is this some sort of ransom event against them
            maybe?  And what are the rest of you telling your
            customers?  We seem to have only a few specifically
            complaining, but those are complaining a lot.
            <div><br>
            </div>
          </div>
          <br>
          <div class="gmail_quote">
            <div dir="ltr" class="gmail_attr">On Tue, Sep 28, 2021 at
              11:06 PM Ivan Kovacevic <<a
                href="mailto:ivan.kovacevic@startelecom.ca"
                target="_blank" moz-do-not-send="true">ivan.kovacevic@startelecom.ca</a>>
              wrote:<br>
            </div>
            <blockquote class="gmail_quote" style="margin:0px 0px 0px
              0.8ex;border-left:1px solid
              rgb(204,204,204);padding-left:1ex">
              <div dir="ltr">
                <div dir="ltr">
                  <div class="gmail_default" style="font-size:small">Happening
                    again. </div>
                  <div class="gmail_default" style="font-size:small"><br>
                  </div>
                  <div class="gmail_default" style="font-size:small"><a
                      href="https://status.bandwidth.com/"
                      target="_blank" moz-do-not-send="true">https://status.bandwidth.com/</a><br>
                  </div>
                  <div class="gmail_default" style="font-size:small"><br>
                  </div>
                  <div class="gmail_default" style="font-size:small"><br>
                  </div>
                  <div>
                    <div dir="ltr">
                      <div dir="ltr">
                        <table cellspacing="0" cellpadding="0"
                          border="0">
                          <tbody>
                            <tr>
                              <td style="width:7.5pt;padding:7.5pt
                                22.5pt 0cm 7.5pt" width="10"
                                valign="top">
                                <p><a href="https://www.startelecom.ca/"
                                    target="_blank"
                                    moz-do-not-send="true"><img
                                      alt="Star Telecom - Cloud
                                      Communications and Customer
                                      Experience Solutions"
                                      moz-do-not-send="true" width="88"
                                      height="96"></a><br>
                                </p>
                              </td>
                              <td
style="border-top:none;border-bottom:none;border-left:none;border-right:1pt
                                solid rgb(177,177,177);padding:0cm"
                                valign="top"><br>
                              </td>
                              <td style="padding:0cm 0cm 0cm 15pt"
                                valign="top">
                                <p><font face="trebuchet ms, sans-serif"><b><span
style="font-size:10.5pt;color:rgb(51,51,51)">Ivan Kovacevic</span></b><span
style="font-size:9pt;color:rgb(173,173,173)"><br>
                                    </span><font size="1"
                                      color="#999999"><i>Co-Founder and
                                        VP Client Services<br>
                                      </i></font></font></p>
                                <p><br>
                                </p>
                              </td>
                            </tr>
                          </tbody>
                        </table>
                      </div>
                    </div>
                  </div>
                  <br>
                </div>
                <br>
                <div class="gmail_quote">
                  <div dir="ltr" class="gmail_attr">On Mon, Sep 27, 2021
                    at 10:19 PM Peter Beckman via VoiceOps <<a
                      href="mailto:voiceops@voiceops.org"
                      target="_blank" moz-do-not-send="true">voiceops@voiceops.org</a>>
                    wrote:<br>
                  </div>
                  <blockquote class="gmail_quote" style="margin:0px 0px
                    0px 0.8ex;border-left:1px solid
                    rgb(204,204,204);padding-left:1ex">On Mon, 27 Sep
                    2021, Ryan Delgrosso wrote:<br>
                    <br>
                    > Nothing meaningful other than the normal public
                    party line.<br>
                    ><br>
                    > I too have heard unofficially that its DDOS,
                    which makes sense given the <br>
                    > recurring nature.<br>
                    ><br>
                    > 4.5hrs down Sat<br>
                    <br>
                      Our monitoring showed 2 hours 47 minutes of actual
                    service affecting<br>
                      outages across Voice (Inbound and Outbound),
                    Messaging, and API/Portal.<br>
                    <br>
                      The issue started at 3pm and recovered at 5:47pm
                    EDT. We reported it to<br>
                      the TAC at 3:07pm, they did not post on Status
                    until 3:31pm.<br>
                    <br>
                    > Some small downtime Sun<br>
                    ><br>
                    > Now deep into Monday with problems.<br>
                    ><br>
                    > Its not a good look, but id like some more
                    transparency.<br>
                    <br>
                      DDoS attacks are real and hard to null route.
                    You've got millions of IP<br>
                      addresses slamming you with data. Your router has
                    a capacity, and your<br>
                      router cannot handle all of that extra crap data
                    along with all of our<br>
                      traffic too.<br>
                    <br>
                      I'm sure BW will be investing in some beefy
                    hardware that will be able to<br>
                      better handle DDoS attacks, as well as working
                    more closely with their<br>
                      peering providers. I have to assume that they were
                    getting gigabits of<br>
                      traffic, overwhelming their links in addition to
                    their edge routers.<br>
                    <br>
                      Cloudflare details how they do it here:<br>
                      <a
href="https://support.cloudflare.com/hc/en-us/articles/200172676-Understanding-Cloudflare-DDoS-protection"
                      rel="noreferrer" target="_blank"
                      moz-do-not-send="true">https://support.cloudflare.com/hc/en-us/articles/200172676-Understanding-Cloudflare-DDoS-protection</a><br>
                    <br>
                      Not much to be transparent about. The Internet is
                    an unfriendly place, and<br>
                      bad actors can rain hell upon any public IP they
                    want. Unsecured laptops,<br>
                      desktops, TVs, IOT devices, etc, all contribute
                    just a little tiny bit,<br>
                      and all focus on one single point, kinda like
                    those giant solar farms with<br>
                      the mirrors and single tower in the middle to boil
                    the molten salt.<br>
                    <br>
                      Well, Bandwidth is the molten salt, and the
                    mirrors are a bunch of<br>
                      unsecured devices on the Internet.<br>
                    <br>
---------------------------------------------------------------------------<br>
                    Peter Beckman                                       
                              Internet Guy<br>
                    <a href="mailto:beckman@angryox.com" target="_blank"
                      moz-do-not-send="true">beckman@angryox.com</a>   
                                                <a
                      href="https://www.angryox.com/" rel="noreferrer"
                      target="_blank" moz-do-not-send="true">https://www.angryox.com/</a><br>
---------------------------------------------------------------------------_______________________________________________<br>
                    VoiceOps mailing list<br>
                    <a href="mailto:VoiceOps@voiceops.org"
                      target="_blank" moz-do-not-send="true">VoiceOps@voiceops.org</a><br>
                    <a
                      href="https://puck.nether.net/mailman/listinfo/voiceops"
                      rel="noreferrer" target="_blank"
                      moz-do-not-send="true">https://puck.nether.net/mailman/listinfo/voiceops</a><br>
                    _______________________________________________<br>
                    VoiceOps mailing list<br>
                    <a href="mailto:VoiceOps@voiceops.org"
                      target="_blank" moz-do-not-send="true">VoiceOps@voiceops.org</a><br>
                    <a
                      href="https://puck.nether.net/mailman/listinfo/voiceops"
                      rel="noreferrer" target="_blank"
                      moz-do-not-send="true">https://puck.nether.net/mailman/listinfo/voiceops</a><br>
                  </blockquote>
                </div>
                <img alt="" style="display: none;"
                  moz-do-not-send="true" width="1" height="1"></div>
              <br>
              <p><span style="font-size:10pt">NOTE: This email message
                  and
                  any attachments are for the sole use of the intended
                  recipient(s) and may
                  contain confidential and/or privileged information.
                  Any unauthorized review,
                  use, disclosure or distribution is prohibited. If you
                  are not the intended recipient,
                  please contact the sender by replying to this email,
                  and destroy all copies of
                  the original message.</span></p>
              _______________________________________________<br>
              VoiceOps mailing list<br>
              <a href="mailto:VoiceOps@voiceops.org" target="_blank"
                moz-do-not-send="true">VoiceOps@voiceops.org</a><br>
              <a
                href="https://puck.nether.net/mailman/listinfo/voiceops"
                rel="noreferrer" target="_blank" moz-do-not-send="true">https://puck.nether.net/mailman/listinfo/voiceops</a><br>
            </blockquote>
          </div>
          _______________________________________________<br>
          VoiceOps mailing list<br>
          <a href="mailto:VoiceOps@voiceops.org" target="_blank"
            moz-do-not-send="true">VoiceOps@voiceops.org</a><br>
          <a href="https://puck.nether.net/mailman/listinfo/voiceops"
            rel="noreferrer" target="_blank" moz-do-not-send="true">https://puck.nether.net/mailman/listinfo/voiceops</a><br>
        </blockquote>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
VoiceOps mailing list
<a class="moz-txt-link-abbreviated" href="mailto:VoiceOps@voiceops.org">VoiceOps@voiceops.org</a>
<a class="moz-txt-link-freetext" href="https://puck.nether.net/mailman/listinfo/voiceops">https://puck.nether.net/mailman/listinfo/voiceops</a>
</pre>
    </blockquote>
  </body>
</html>