Friday, April 3, 2009

Issues with DDoS against Internet Name Servers

| Brett D. Arion |
There are emerging reports of some issues with some Internet Name Servers. On Tuesday, NeuStar was attacked which resulted in the disruption of Amazon's S3 Cloud computing service. Wednesday and Thursday saw interruptions of Register.com, on of the largest website providers, which posted this message on the front page of their site:

"
Service Notice
For the past three days Register.com has been experiencing intermittent service disruptions as a result of a distributed denial of service (DDoS) attack – an intentionally malicious flooding of our systems from various points across the internet. We know the disruption of business this has caused our customers is unacceptable, and we are working round the clock to combat it. (For more information about DDoS attacks, please see http://en.wikipedia.org/wiki/Denial-of-service_attack.)

While we are still under attack, our counter-measures are currently minimizing the disruption to your services. We are using all available means to halt this criminal attack on our business and our customers' business.

We are committed to updating you in as timely manner as possible, please continue to check back here for additional updates or go to www.twitter.com/Register_com.

Thank you for your patience. "

I checked both the Internet Health Report and the Team Cymru dns monitoring, and while there appear to be some issues, it has not been that wide spread. We will continue to monitor the situation over the weekend to see what we can come up with.....additional reports and info can be found at the following links as well:

Dshield.org


SC Magazine

Update: Further research has revealed that register.com is now under the protection of Prolexic Technologies at this time

Free Security Magazines