Main Nav

We have experienced some ddos attacks over the last few weeks, a couple of them were large enough to actually be service impacting by using up all of our available bandwidth to our providers. I have managed to gather data on what a couple of the attacked IPs were doing prior to the attacks, they were using xbox live. There is actually an faq on the xbox live site for ddos attacks:


I wouldn't call my evidence 100% concrete, but I have a pretty good feeling that this may be what happened to us.

Has anyone else experienced this? If so, how did you deal with it?

btw, cross posting to a couple of listservs, sorry if I "spam" anyone.

--
Joe Roth
Network Manager
Binghamton University
Ph. 607-777-7528
Fax 607-777-4009
********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

Comments

Do your LAN clients get public IPs or 1-1NAT?  Just curious.

Public IPs.


Just for clarification, were your internal IPs the source or destination of the DDOS attacks?

 

Thomas Carter

Network and Operations Manager

Austin College

903-813-2564

 

We've had students in the dorms be the targets of ddos's like this. Given that it's pretty simple and cheap these days to get someone you don't like DDoS'd, it's probably likely to become more common. In our case the bandwidth to the individual dorms/reshalls is much less than the border and core capacity of our network. We will blackhole route the destination of the attack to take the traffic off the dorm networks if necessary. That's been about as far as we've had to go so far in terms of mitigating something like this. Regards iso
We have had this happen one time to a student XBOX on campus. We do 1-1 NAT for game consoles. We called our ISP when it happened and gave them a list of the source IPs and disabled the student's port temporarily until the attack stopped. Kate Robinson Network Administrator, Information Technology Services Western State Colorado University 970.943.3123 www.western.edu krobinson@western.edu -----Original Message----- From: The EDUCAUSE Network Management Constituent Group Listserv [mailto:NETMAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Isaac Orr Sent: Wednesday, March 12, 2014 9:21 AM To: NETMAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [NETMAN] DDoS attack caused by xbox live players? We've had students in the dorms be the targets of ddos's like this. Given that it's pretty simple and cheap these days to get someone you don't like DDoS'd, it's probably likely to become more common. In our case the bandwidth to the individual dorms/reshalls is much less than the border and core capacity of our network. We will blackhole route the destination of the attack to take the traffic off the dorm networks if necessary. That's been about as far as we've had to go so far in terms of mitigating something like this. Regards iso
Thank you for the responses, we are working with our providers to see if there are any potential solutions, i.e. blackhole the IPs (if we catch the attack quick enough), etc.


Close
Close


Annual Conference
September 29–October 2
Register Now!

Events for all Levels and Interests

Whether you're looking for a conference to attend face-to-face to connect with peers, or for an online event for team professional development, see what's upcoming.

Close

Digital Badges
Member recognition effort
Earn yours >

Career Center


Leadership and Management Programs

EDUCAUSE Institute
Project Management

 

 

Jump Start Your Career Growth

Explore EDUCAUSE professional development opportunities that match your career aspirations and desired level of time investment through our interactive online guide.

 

Close
EDUCAUSE organizes its efforts around three IT Focus Areas

 

 

Join These Programs If Your Focus Is

Close

Get on the Higher Ed IT Map

Employees of EDUCAUSE member institutions and organizations are invited to create individual profiles.
 

 

Close

2014 Strategic Priorities

  • Building the Profession
  • IT as a Game Changer
  • Foundations


Learn More >

Uncommon Thinking for the Common Good™

EDUCAUSE is the foremost community of higher education IT leaders and professionals.