41–50 of 55 posts
[spiderman-pointing-at-spiderman.gif] seriously, aren't they commonly the SOURCE of many DoS attacks... any hosting provider where some random person on the internet and $5 of credit on a prepaid visa card will have this problem.
I thought OVH and Hetzner were the source of a ton of these DDoS attacks. Their IP ranges always seem to be in abuse logs. Cloudflare write in a recent attack: The top networks included the German provider Hetzner Online GmbH (Autonomous System Number 24940), Azteca Comunicaciones Colombia (ASN 262186), OVH in France (ASN 16276), as well as other cloud providers. https://blog.cloudflare.com/15m-rps-ddos-attack/
Hetzner operates a 5-10 Tbps network, roughly the same traffic volume as all of Spectrum/Charter Communications (the 2nd largest cable company in the US). They show up everywhere because they are a big part of the internet. A wise network operator once told me - never shit on people when they are under attack. Because in the not too distant future you are going to be the victim.
I thought OVH and Hetzner were the source of a ton of these DDoS attacks. Their IP ranges always seem to be in abuse logs. Cloudflare write in a recent attack: The top networks included the German provider Hetzner Online GmbH (Autonomous System Number 24940), Azteca Comunicaciones Colombia (ASN 262186), OVH in France (ASN 16276), as well as other cloud providers. https://blog.cloudflare.com/15m-rps-ddos-attack/
I mean that makes sense no? Attacks like that rely on compromised servers so it shouldn't be a big surprise large hosting provides are among the biggest attackers. Other large ISPs like digital ocean and Alibaba are among the top attackers in that attack also. I assume this attack is UDP based unlike the one you linked too.
They aren't even in the top 10 here. Its the claim hetzner is larger than AWS? I find that highly unlikely.
Earlier quoted context omitted.
I mean that makes sense no? Attacks like that rely on compromised servers so it shouldn't be a big surprise large hosting provides are among the biggest attackers. Other large ISPs like digital ocean and Alibaba are among the top attackers in that attack also. I assume this attack is UDP based unlike the one you linked too.
Where are the AWS and GCP ranges then? They aren't even in the top 10 here. Its the claim hetzner is larger than AWS? I find that highly unlikely.
Earlier quoted context omitted.
Where are the AWS and GCP ranges then? They aren't even in the top 10 here. Its the claim hetzner is larger than AWS? I find that highly unlikely.
We probably don't see AWS or Azure as source if these DDOS attacks because of egress costs.
Earlier quoted context omitted.
Not if the level of incoming bandwidth exceeds the available bandwidth of the circuits involved.. you can't filter it when the link is saturated. Cloudflare uses other techniques like global distribution so aggregate bandwidth is higher than the attack bandwidth
does anyone else have a network that can do what Cloudflare can do? seems like magic sometimes.
Earlier quoted context omitted.
Hetzner operates a 5-10 Tbps network, roughly the same traffic volume as all of Spectrum/Charter Communications (the 2nd largest cable company in the US). They show up everywhere because they are a big part of the internet. A wise network operator once told me - never shit on people when they are under attack. Because in the not too distant future you are going to be the victim.
Umm.. AWS and GCP and friends dwarf these guys, but I zee Hetzner, OVH and DigitalOcean in these things.
Earlier quoted context omitted.
Not if the level of incoming bandwidth exceeds the available bandwidth of the circuits involved.. you can't filter it when the link is saturated. Cloudflare uses other techniques like global distribution so aggregate bandwidth is higher than the attack bandwidth
does anyone else have a network that can do what Cloudflare can do? seems like magic sometimes.
The NaWas infrastructure is designed as an on-demand service. After detecting an attack, the traffic is routed via BGP to the NaWas hardware and then the mitigation process starts. All traffic is then rerouted and the own connections can thus manage with less capacity and thus remain cheaper.
To connect to the NaWas, a port must be available from one of the following parties: AMS-IX, NL-IX, LINX, NET-IX, Top-IX, M-IX, V-IX or one of these cloud interconnects DCSPine, Epsilon, Megaport.
Earlier quoted context omitted.
Hetzner operates a 5-10 Tbps network, roughly the same traffic volume as all of Spectrum/Charter Communications (the 2nd largest cable company in the US). They show up everywhere because they are a big part of the internet. A wise network operator once told me - never shit on people when they are under attack. Because in the not too distant future you are going to be the victim.
Umm.. AWS and GCP and friends dwarf these guys, but I zee Hetzner, OVH and DigitalOcean in these things.
[spiderman-pointing-at-spiderman.gif] seriously, aren't they commonly the SOURCE of many DoS attacks... any hosting provider where some random person on the internet and $5 of credit on a prepaid visa card will have this problem.