DDoS and Security Reports

If you’ve been watching the tech news lately, you’ve seen that Anonymous has opened hostilities against the Church of Scientology. Among their many attacks are several DDoS attacks designed to disrupt their website. Here’s some quick numbers on the attacks.

Looking specifically at attacks in the past week directed at AS7914 (registered to CSI – Church of Scientology International), I find the following:

• Number of attacks measured: 488 in the past week
• Attacks by date: 488 on January 19, 2008
• Maximum PPS rates seen: nearly 20000 pps (packets per second), with an average attack size of 15,000 pps
• Maximum bandwidth seen per attack: 220 Mbps, with an average attack size of 168 Mbps. This is on the high side of an attack, but significantly smaller than the largest ones we commonly see nowadays
• Maximum duration of a single attack: 1.8 hours, which is on the long end of common, but the average attack lasted just under half an hour
• Number of reporting ISPs: 1, indicating that this is not a huge, broadly sourced attack (ie it may not have registered on other ISPs systems)

So, clearly the attacks are real. In fact, you can see in this Netcraft report for the website that they’ve moved it to a DDoS mitigation service. The attacks used in this case are common, garden variety DDoS attacks.

Just some numbers around a newsmaking DDoS event.

Popularity: 4% [?]

This entry was posted on Friday, January 25th, 2008 at 2:53 pm and is filed under ATLAS, Botnets. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.