<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Trebuchet MS";
panose-1:2 11 6 3 2 2 2 2 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">While we all might love to know what they’ve done to TRY to mitigate the issue; it’s reasonable to assume that they’d be fairly quiet about what they’re doing/trying to do. Right now, I’d rather them keep a low profile and simply get the
issue addressed. You know they’re hemorrhaging customers left-and-right due to port-aways.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> VoiceOps <voiceops-bounces@voiceops.org> <b>On Behalf Of
</b>Ryan Delgrosso<br>
<b>Sent:</b> Wednesday, September 29, 2021 1:52 PM<br>
<b>To:</b> voiceops@voiceops.org<br>
<b>Subject:</b> Re: [VoiceOps] Bandwidth - Monday Outage<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p>FYI a pretty weak but publicly referencable acknowledgement of whats going on<o:p></o:p></p>
<p><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.bandwidth.com%2fblog%2fa-message-to-our-customers-and-partners%2f&c=E,1,owS2cVWZA1WGtGMAEPu5Ti5eAX1FOEqqPpmk_aMkLeDVGUmFu8zbe-bfN7-I3BmpNDZJ3qFWqtTezgSk_R_ZotZ43dLmcgYlB_u6Qh-e-AkGRe0,&typo=1">https://www.bandwidth.com/blog/a-message-to-our-customers-and-partners/</a><o:p></o:p></p>
<p><o:p> </o:p></p>
<div>
<p class="MsoNormal">On 9/29/2021 10:37 AM, Pete Eisengrein wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">They have publicly acknowledge it as a DDoS ( <a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.bandwidth.com%2fblog%2fa-message-to-our-customers-and-partners%2f&c=E,1,uAmO5u5c6u8d8fA2aiZUY71pe5rUngX8otVxHtppAMoqMT4mPT6x-kUwGStbW61Br73eiJFUz_ELBDJljCzgYb-3jTJ4oRlE2hKikfXw-w,,&typo=1">
https://www.bandwidth.com/blog/a-message-to-our-customers-and-partners/</a> ) , but being pretty tight-lipped with specifics on what it is or how they are mitigating. <o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Wed, Sep 29, 2021 at 12:29 PM Carlos Alvarez <<a href="mailto:caalvarez@gmail.com">caalvarez@gmail.com</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal">Is this some sort of ransom event against them maybe? And what are the rest of you telling your customers? We seem to have only a few specifically complaining, but those are complaining a lot.
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Tue, Sep 28, 2021 at 11:06 PM Ivan Kovacevic <<a href="mailto:ivan.kovacevic@startelecom.ca" target="_blank">ivan.kovacevic@startelecom.ca</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt">Happening again. <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt"><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fstatus.bandwidth.com%2f&c=E,1,WolwFQSZ1OSs3rjO6hgO6OvRKpAzNrbIinIqdFrjiYR6iDxcrIaOmjTwQjb8h9dH4srU-RncK8II-R8Nr7Hs6VVXDGoF_4tEQzedk5uxxsq3FSj8yodwABlgng,,&typo=1" target="_blank">https://status.bandwidth.com/</a><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
</div>
<div>
<div>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="10" valign="top" style="width:7.5pt;padding:7.5pt 22.5pt 0in 7.5pt">
<p><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:windowtext;text-decoration:none"><o:p></o:p></span></a></p>
</td>
<td valign="top" style="border:none;border-right:solid #B1B1B1 1.0pt;padding:0in 0in 0in 0in">
</td>
<td valign="top" style="padding:0in 0in 0in 15.0pt">
<p><b><span style="font-size:10.5pt;font-family:"Trebuchet MS",sans-serif;color:#333333"><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:#333333;text-decoration:none">Ivan
Kovacevic</span><span style="font-size:9.0pt;color:#ADADAD;font-weight:normal;text-decoration:none"><br>
</span><i><span style="font-size:7.5pt;color:#999999;font-weight:normal;text-decoration:none">Co-Founder and VP Client Services</span></i><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext;font-weight:normal;text-decoration:none"><o:p></o:p></span></a></span></b></p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
<p class="MsoNormal"><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:windowtext;text-decoration:none"><o:p> </o:p></span></a></p>
</div>
<p class="MsoNormal"><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:windowtext;text-decoration:none"><o:p> </o:p></span></a></p>
<div>
<div>
<p class="MsoNormal"><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:windowtext;text-decoration:none">On
Mon, Sep 27, 2021 at 10:19 PM Peter Beckman via VoiceOps <<u><span style="color:blue">voiceops@voiceops.org</span></u>> wrote:<o:p></o:p></span></a></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<p class="MsoNormal"><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:windowtext;text-decoration:none">On
Mon, 27 Sep 2021, Ryan Delgrosso wrote:<br>
<br>
> Nothing meaningful other than the normal public party line.<br>
><br>
> I too have heard unofficially that its DDOS, which makes sense given the <br>
> recurring nature.<br>
><br>
> 4.5hrs down Sat<br>
<br>
Our monitoring showed 2 hours 47 minutes of actual service affecting<br>
outages across Voice (Inbound and Outbound), Messaging, and API/Portal.<br>
<br>
The issue started at 3pm and recovered at 5:47pm EDT. We reported it to<br>
the TAC at 3:07pm, they did not post on Status until 3:31pm.<br>
<br>
> Some small downtime Sun<br>
><br>
> Now deep into Monday with problems.<br>
><br>
> Its not a good look, but id like some more transparency.<br>
<br>
DDoS attacks are real and hard to null route. You've got millions of IP<br>
addresses slamming you with data. Your router has a capacity, and your<br>
router cannot handle all of that extra crap data along with all of our<br>
traffic too.<br>
<br>
I'm sure BW will be investing in some beefy hardware that will be able to<br>
better handle DDoS attacks, as well as working more closely with their<br>
peering providers. I have to assume that they were getting gigabits of<br>
traffic, overwhelming their links in addition to their edge routers.<br>
<br>
Cloudflare details how they do it here:<br>
<u><span style="color:blue">https://support.cloudflare.com/hc/en-us/articles/200172676-Understanding-Cloudflare-DDoS-protection</span></u><br>
<br>
Not much to be transparent about. The Internet is an unfriendly place, and<br>
bad actors can rain hell upon any public IP they want. Unsecured laptops,<br>
desktops, TVs, IOT devices, etc, all contribute just a little tiny bit,<br>
and all focus on one single point, kinda like those giant solar farms with<br>
the mirrors and single tower in the middle to boil the molten salt.<br>
<br>
Well, Bandwidth is the molten salt, and the mirrors are a bunch of<br>
unsecured devices on the Internet.<br>
<br>
---------------------------------------------------------------------------<br>
Peter Beckman Internet Guy<br>
<u><span style="color:blue">beckman@angryox.com</span></u>
<u><span style="color:blue">https://www.angryox.com/</span></u><br>
---------------------------------------------------------------------------_______________________________________________<br>
VoiceOps mailing list<br>
<u><span style="color:blue">VoiceOps@voiceops.org</span></u><br>
<u><span style="color:blue">https://puck.nether.net/mailman/listinfo/voiceops</span></u><br>
_______________________________________________<br>
VoiceOps mailing list<br>
<u><span style="color:blue">VoiceOps@voiceops.org</span></u><br>
<u><span style="color:blue">https://puck.nether.net/mailman/listinfo/voiceops</span></u><o:p></o:p></span></a></p>
</blockquote>
</div>
<p class="MsoNormal"><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:windowtext;text-decoration:none"><o:p></o:p></span></a></p>
</div>
<p class="MsoNormal"><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:windowtext;text-decoration:none"><o:p> </o:p></span></a></p>
<p><span style="font-size:10.0pt"><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:windowtext;text-decoration:none">NOTE:
This email message and any attachments are for the sole use of the intended recipient(s) and may contain confidential and/or privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient,
please contact the sender by replying to this email, and destroy all copies of the original message.</span><span style="font-size:11.0pt;color:windowtext;text-decoration:none"><o:p></o:p></span></a></span></p>
<p class="MsoNormal"><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:windowtext;text-decoration:none">_______________________________________________<br>
VoiceOps mailing list<br>
<u><span style="color:blue">VoiceOps@voiceops.org</span></u><br>
<u><span style="color:blue">https://puck.nether.net/mailman/listinfo/voiceops</span></u><o:p></o:p></span></a></p>
</blockquote>
</div>
<p class="MsoNormal"><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:windowtext;text-decoration:none">_______________________________________________<br>
VoiceOps mailing list<br>
<u><span style="color:blue">VoiceOps@voiceops.org</span></u><br>
<u><span style="color:blue">https://puck.nether.net/mailman/listinfo/voiceops</span></u><o:p></o:p></span></a></p>
</blockquote>
</div>
<p class="MsoNormal"><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:windowtext;text-decoration:none"><br>
<br>
<o:p></o:p></span></a></p>
<pre><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:windowtext;text-decoration:none">_______________________________________________<o:p></o:p></span></a></pre>
<pre><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:windowtext;text-decoration:none">VoiceOps mailing list<o:p></o:p></span></a></pre>
<pre><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:windowtext;text-decoration:none"><u><span style="color:blue">VoiceOps@voiceops.org</span></u><o:p></o:p></span></a></pre>
<pre><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.startelecom.ca%2f&c=E,1,z1xMwqyQSba2tIyKk3epfyt83pf2_1tWCHxSK_gEIhOKhqWf0AI2Pjim0jG0f0GhZfi9CRSrv_uuignvRskhETaKKEng-Jqv74-nf4cdBQ,,&typo=1" target="_blank"><span style="color:windowtext;text-decoration:none"><u><span style="color:blue">https://puck.nether.net/mailman/listinfo/voiceops</span></u><o:p></o:p></span></a></pre>
</blockquote>
</div>
</body>
</html>