{"id":3099,"date":"2020-09-04T11:57:21","date_gmt":"2020-09-04T09:57:21","guid":{"rendered":"http:\/\/issues.edpnet.be\/?p=3099"},"modified":"2020-09-04T15:12:24","modified_gmt":"2020-09-04T13:12:24","slug":"info-report-on-the-recent-ddos-issue","status":"publish","type":"post","link":"https:\/\/storing.edpnet.nl\/?p=3099","title":{"rendered":"Info: Report on the recent DDoS issue"},"content":{"rendered":"<p>Dear customers,<\/p>\n<p>Starting from Friday edpnet was subject to major Denial of Service attacks (DDoS). An overview of the attacks and the time frames can be found below:<\/p>\n<ul>\n<li>Friday 28\/08\/2020, 18:00 &#8211; 19:00<\/li>\n<li>Sunday 30\/08\/2020, 20:30 &#8211; 20:45<\/li>\n<li>Sunday 30\/08\/2020, 22:20 &#8211; 00:55<\/li>\n<li>Monday 31\/08\/2020, 04:05 &#8211; 05:05<\/li>\n<li>Monday 31\/08\/2020, 11:15 &#8211; 18:45<\/li>\n<\/ul>\n<p>In the past edpnet was always capable of mitigating these attacks ourselves by blocking these at the edge of our network. It looks like we were lucky in the past, and our luck ran out.<\/p>\n<p>The attacks were this time directed towards our core networking equipment, primary and backup, and the traffic reached 200 Gbps, way too much for us to handle ourselves, causing DNS issues, and slow internet connections towards multiple destinations. Therefore we decided to contact a party (NBIP-NaWas) specialized in resolving these attacks, and setup a connection with them. This connection was up and running by midnight, and they mitigated 5 more attacks (three of 100 Gbps, two of 200 Gbps) without impact for our customers, proving it works. Two examples of such attacks can be found below:<\/p>\n<p><a href=\"https:\/\/issues.edpnet.be\/wp-content\/uploads\/2020\/09\/ddos2.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-3101\" src=\"https:\/\/issues.edpnet.be\/wp-content\/uploads\/2020\/09\/ddos2-300x150.jpg\" alt=\"\" width=\"740\" height=\"370\" srcset=\"https:\/\/issues.edpnet.be\/wp-content\/uploads\/2020\/09\/ddos2-300x150.jpg 300w, https:\/\/issues.edpnet.be\/wp-content\/uploads\/2020\/09\/ddos2.jpg 700w\" sizes=\"auto, (max-width: 740px) 100vw, 740px\" \/><\/a><\/p>\n<p><a href=\"https:\/\/issues.edpnet.be\/wp-content\/uploads\/2020\/09\/ddos1.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-3100\" src=\"https:\/\/issues.edpnet.be\/wp-content\/uploads\/2020\/09\/ddos1-300x150.jpg\" alt=\"\" width=\"738\" height=\"369\" srcset=\"https:\/\/issues.edpnet.be\/wp-content\/uploads\/2020\/09\/ddos1-300x150.jpg 300w, https:\/\/issues.edpnet.be\/wp-content\/uploads\/2020\/09\/ddos1-768x384.jpg 768w, https:\/\/issues.edpnet.be\/wp-content\/uploads\/2020\/09\/ddos1-750x375.jpg 750w, https:\/\/issues.edpnet.be\/wp-content\/uploads\/2020\/09\/ddos1.jpg 1000w\" sizes=\"auto, (max-width: 738px) 100vw, 738px\" \/><\/a><\/p>\n<p>This setup is permanent, and this way we can minimize these kind of attacks much quicker, reducing the impact to a bare minimum.<\/p>\n<p>You can read some background information online:<\/p>\n<p><a href=\"https:\/\/datanews.knack.be\/ict\/nieuws\/ddos-aanval-treft-edpnet\/article-news-1635675.html\">https:\/\/datanews.knack.be\/ict\/nieuws\/ddos-aanval-treft-edpnet\/article-news-1635675.html<\/a><\/p>\n<p><a href=\"https:\/\/datanews.levif.be\/ict\/actualite\/une-attaque-ddos-touche-edpnet\/article-news-1326101.html\">https:\/\/datanews.levif.be\/ict\/actualite\/une-attaque-ddos-touche-edpnet\/article-news-1326101.html<\/a><\/p>\n<p><a href=\"https:\/\/tweakers.net\/nieuws\/171594\/belgische-provider-edpnet-heeft-al-vier-dagen-te-maken-met-ddos-aanvallen.html\">https:\/\/tweakers.net\/nieuws\/171594\/belgische-provider-edpnet-heeft-al-vier-dagen-te-maken-met-ddos-aanvallen.html<\/a><\/p>\n<p>We sincerely apologize for any inconveniences caused.<\/p>\n<p><strong>Customer-friendly regards<\/strong><strong><br \/>\nThe edpnet team<\/strong><\/p>\n<p><em>P.S. Today 04\/09 we can confirm there were no new attacks in the last 48 hours.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Dear customers, Starting from Friday edpnet was subject to major Denial of Service attacks (DDoS). An overview of the attacks and the time frames can be found below: Friday 28\/08\/2020, 18:00 &#8211; 19:00 Sunday 30\/08\/2020, 20:30 &#8211; 20:45 Sunday 30\/08\/2020, 22:20 &#8211; 00:55 Monday 31\/08\/2020, 04:05 &#8211; 05:05 Monday 31\/08\/2020, 11:15 &#8211; 18:45 In the [&hellip;]<\/p>\n","protected":false},"author":15,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27,28,44],"tags":[72,60,71,75],"class_list":["post-3099","post","type-post","status-publish","format-standard","hentry","category-belgium","category-info","category-the-netherlands","tag-belgium","tag-info","tag-internet","tag-netherlands"],"_links":{"self":[{"href":"https:\/\/storing.edpnet.nl\/index.php?rest_route=\/wp\/v2\/posts\/3099","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/storing.edpnet.nl\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/storing.edpnet.nl\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/storing.edpnet.nl\/index.php?rest_route=\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/storing.edpnet.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3099"}],"version-history":[{"count":8,"href":"https:\/\/storing.edpnet.nl\/index.php?rest_route=\/wp\/v2\/posts\/3099\/revisions"}],"predecessor-version":[{"id":3109,"href":"https:\/\/storing.edpnet.nl\/index.php?rest_route=\/wp\/v2\/posts\/3099\/revisions\/3109"}],"wp:attachment":[{"href":"https:\/\/storing.edpnet.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3099"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/storing.edpnet.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3099"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/storing.edpnet.nl\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3099"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}