AAISP Under Attack!

https://aastatus.net/2178

Seems AAISP is under attack, they claim they're being "severely" DOS'd, this has lead to some major issues with packet loss on the network (which I've witnessed myself through BQM's)

Currently their site and BQM services all seem to be offline or not reachable at least... I wonder if the issues yesterday with BT may have also been an attack... maybe this is going to become a new norm.

So that's what has been going on. Thanks for the heads-up.

It seems OK right now, but was a pig most of the evening. So much so I rebooted my laptop, which made no difference, found the same on my iPad so then turned the router off for a bit, to no avail, as my sync was fine.

BQM doesn't look too bad, but this site for instance was crawling, with the Beeb not much cop either. Email client just about gave up.

Yeah it seemed to affect routing to certain data centres more than connections themselves from what I'm picking up...

Ass you can see here, it seems they have fought through it now... cue the next I suppose!

Yes, at about 10:30 tonight I went and watched Newsnight for a bit. Came back and this is flying again as I expect.

Perhaps they are being attacked by GCHQ in retaliation for RevK's opposition to the proposed new bill!

Better now. They probably stopped advertising some subnets to certain peers where the heaviest traffic was coming from and they usually see very little legitimate traffic and shuffled traffic around to spread it between their external capacity.

That's the usual way to do these things.

Either way it's still unusual for ISPs like A&A to be on the receiving end of such attacks due to their size, fortunately.

It seems that it's not AA being attacked but a customer and there systems are taking the beating defending that user, however as the redirect traffic it then affects it elsewhere.

Just as a pleasant thought essentially crippling AAISP or a bunch of smaller ISPs can be done for $100 and take about 10 minutes.

Hmmm, yep...

I was just wondering if AA are going to be investigation the user/s under attack and find out why they where under attack... considering the action being taken by certain groups to find and disable the means of potential sources or supporters of certain material online...

It would make sense for someone wanting to do such a thing to use an ISP such as AA.

Uk under or launching a cyber attack

http://www.speedguide.net/port.php?port=1755

Brief though. Someone testing something I imagine. A couple of hours of 53Gb, an hour of 73Gb ending at the same time, 5 minutes of 16.4Gb a bit later.

I'm looking at a site offering 'stress testing' offering me unlimited 90 minute duration 30Gbps UDP floods and/or 5 million PPS SYN floods.

For an idea of the scale of those attacks have a look at https://www.linx.net/pubtools/member-techlist.html

2Gbps would be enough to saturate AAISP's LINX connectivity. 30Gbps would certainly saturate their peering and their transit comfortably.

Edited by deleted (Thu 19-Nov-15 14:14:31)

Maybe alot of people are streaming videos on youporn right now

Hi all, We've posted some info here: http://aa.net.uk/news-20151119-dos.html

Wow!

Attack started on the 18th and a comprehensive statement published on the 20th with details of actions being taken to mitigate future attacks.

Time to consider how much getting out of my current contract would cost!

AAISPs response and transparency over the whole matter has been really commendable, even down to the recent 2nd LNS rebalance they had to do where they admitted there was a bit of human error. It is a shame so many ISPs have drifted away from being transparent with their customers.

+1

As soon as it started they kept the public (not just customers) in the loop!

However some providers don't even release details of attacks like this, or do so around 3 months later...

Well Done AAISP!

In reply to a post by jelv:

Time to consider how much getting out of my current contract would cost!

yes, AAISP have Clue; sadly they charge quite a lot for using 100gb or more of data a month, if you're into Netflix / Amazon Prime etc.

In reply to a post by jchamier:

In reply to a post by jelv:

Time to consider how much getting out of my current contract would cost!

yes, AAISP have Clue; sadly they charge quite a lot for using 100gb or more of data a month, if you're into Netflix / Amazon Prime etc.

Yes this is a problem. There are meant to be new packages on the way. It would be nice if the new ones are as competitive as other ISPs in the same league, they might actualy expand their customer base a little if that happened.