The Rise of Packet Rate Attacks: When Core Routers Turn Evil

The Rise of Packet Rate Attacks: When Core Routers Turn Evil(blog.ovhcloud.com)

37 points by pjf 2 years ago | 5 comments

Animats 2 years ago |

Is there a worldwide equivalent to North American's NANOG, where the operations people can reach each other?[1]

[1] https://nanog.org/

throw0101b 1 year ago | |

"Like-minded orgs in our global community."

* https://nanog.org/resources/organizations-our-community/

3x35r22m4u 2 years ago |

> Indeed, a great part of these IPs are known as MikroTik Routers

I wonder why they decided not to include the exact percentage of the attack coming from Mikrotik devices or a list of the top 10 vendors and their share.

Like, did Mikrotik generate 50% of the high packet rate DDoS? Or was it like 10% coming from Microtik, 10% from major vendors and 80% of others/unknown?

paulnpace 2 years ago |

Dumb guy question:

Did they search for MikroTik because it is easy to search for and has some history of vulnerabilities?

marcus0x62 2 years ago | |

They did a Shodan-style search on the IPs they believed were involved in the attack and determined they were Mikrotik routers.