Dear all
We are memeber on this list since many years now, but not so chatty, more listening.
But today I feel a strong necessity to contact the community, since we (ISP ZUGERNET, AS 28859) are being attacked many times over the last 24 hours with huge traffic disabling our network completely. The attack is really very damaging: to ourselves, to our customers and to their customers and partners. You can imagine...
If someone of you can give me a hint on how to track down, WHO is causing this, I would really appreciate any help and may it be very small. I know, that technically such attacks are not trackable - but what I mean is more: if someone can share some "underground knowledge" with me to possibly finding out which bot-net is used (under the control of whom etc; we can share some netflow capture with a huge amount of source-ip-addresses) and possibly has "underground-contacts" to find out more about them...?
Thank you in advance! Feel free to answer me off-list if you feel more appropriate.
Kind regards, Patrick Hofmann
___________________________________________________________________________ ZUGERNET, Hofmann Informatik AG · Grienbachstr. 17 · 6300 Zug · Switzerland http://www.zugernet.ch/ · fon +41 (0)41 766 88 22 · fax +41 (0)41 766 88 33