Mailing List Archive

Maybe related to
https://www.bleepingcomputer.com/news/security/swiss-government-warns-of-ongoing-ddos-attacks-data-leak/

?

    ---Mike

On 6/16/2023 11:20 AM, Miller, Jon via Outages wrote:
>
> For the last week we have had trouble reaching a web site in Geneva,
> Switzerland.  A trace route to 193.5.93.80 times out (most of the
> time).  I see this from two Cogent connections and a Frontier
> connection. Since Cogent and Frontier both successfully hand off to
> twelve99.net, they aren’t going to offer any help.  Do you all see
> this as well?
>
>
>
> This message and any attachments may contain legally privileged or
> confidential information, and are intended only for the individual or
> entity identified above as the addressee. If you are not the
> addressee, or if this message has been addressed to you in error, you
> are not authorized to read, copy, or distribute this message and any
> attachments, and we ask that you please delete this message and
> attachments (including all copies) and notify the sender. Delivery of
> this message and any attachments to any person other than the intended
> recipient(s) is not intended in any way to waive confidentiality or a
> privilege. All personal messages express views only of the individual
> sender, and may not be copied or distributed without this statement.
>
> _______________________________________________
> Outages mailing list
> Outages@outages.org
> https://puck.nether.net/mailman/listinfo/outages

I am seeing the same from my Verizon Fios connection (AS701).

[first few hops snipped for privacy]
5 11 ms 10 ms 10 ms ae-14.bar4.Philadelphia1.Level3.net
[4.68.38.217]
6 90 ms 90 ms 101 ms ae2.3211.edge7.Paris1.level3.net
[4.69.133.238]
7 89 ms 90 ms 91 ms COLT-TELECO.edge7.Paris1.Level3.net
[213.19.202.138]
8 * * * Request timed out.
9 * * * Request timed out.
10 100 ms 100 ms 99 ms cpech_gva000522.ia.colt.net
[213.173.181.226]
11 * * * Request timed out.
12 * * * Request timed out.
13 * * * Request timed out.
14 * * * Request timed out.
...

If you would like to test with more connections, you can use Global
Traceroute <https://www.globaltraceroute.com/>, which is powered by RIPE
Atlas probes hosted on a wide variety of networks. They do have daily
limits, so if you want to run more than a few, I would suggest signing up
for RIPE Atlas. The RIPE Atlas economy is based on hosting your own probe
in order to get credits to run various measurements. However, if you want
to use this, email me privately, and I will send you a bunch of credits to
use.

On Fri, Jun 16, 2023 at 11:22?AM Miller, Jon via Outages <
outages@outages.org> wrote:

> For the last week we have had trouble reaching a web site in Geneva,
> Switzerland. A trace route to 193.5.93.80 times out (most of the time). I
> see this from two Cogent connections and a Frontier connection. Since
> Cogent and Frontier both successfully hand off to twelve99.net, they
> aren’t going to offer any help. Do you all see this as well?
>
>
>
>
> This message and any attachments may contain legally privileged or
> confidential information, and are intended only for the individual or
> entity identified above as the addressee. If you are not the addressee, or
> if this message has been addressed to you in error, you are not authorized
> to read, copy, or distribute this message and any attachments, and we ask
> that you please delete this message and attachments (including all copies)
> and notify the sender. Delivery of this message and any attachments to any
> person other than the intended recipient(s) is not intended in any way to
> waive confidentiality or a privilege. All personal messages express views
> only of the individual sender, and may not be copied or distributed without
> this statement.
> _______________________________________________
> Outages mailing list
> Outages@outages.org
> https://puck.nether.net/mailman/listinfo/outages
>

mike tancsa via Outages writes:
> Maybe related to
> https://www.bleepingcomputer.com/news/security/swiss-government-warns-of-ongoing-ddos-attacks-data-leak/

Right. The "NoName DDoS" part of that article is probably more relevant
to these outages than the ransomware/Xplain parts.

Since Monday or Tuesday this week, there have been DDoS attacks to
various Swiss web sites, including (state/canton and municipal)
administration, transportation, and various others. This is suspected
to be related to a speech (over VC) by the Ukrainian President at the
Swiss parliament this past Thursday and other signals from Swiss
politicians that certain circles interpret as "anti-Russian".
--
Simon.

> ?

> ---Mike

> On 6/16/2023 11:20 AM, Miller, Jon via Outages wrote:

> For the last week we have had trouble reaching a web site in Geneva, Switzerland. A trace route to
> 193.5.93.80 times out (most of the time). I see this from two Cogent connections and a Frontier
> connection. Since Cogent and Frontier both successfully hand off to twelve99.net, they aren’t going
> to offer any help. Do you all see this as well?



> This message and any attachments may contain legally privileged or confidential information, and are
> intended only for the individual or entity identified above as the addressee. If you are not the
> addressee, or if this message has been addressed to you in error, you are not authorized to read,
> copy, or distribute this message and any attachments, and we ask that you please delete this
> message and attachments (including all copies) and notify the sender. Delivery of this message and
> any attachments to any person other than the intended recipient(s) is not intended in any way to
> waive confidentiality or a privilege. All personal messages express views only of the individual
> sender, and may not be copied or distributed without this statement.
> _______________________________________________
> Outages mailing list
> Outages@outages.org
> https://puck.nether.net/mailman/listinfo/outages

> _______________________________________________
> Outages mailing list
> Outages@outages.org
> https://puck.nether.net/mailman/listinfo/outages

_______________________________________________
Outages mailing list
Outages@outages.org
https://puck.nether.net/mailman/listinfo/outages