Incident report - DDOS 3rd of Septermber 2013

[matt]

Incident report - DDOS 3rd of September 2013

At Approximately 20:11 on the 3rd of September 2013 a DDOS (distributed denial of service attack) was directed toward one of our Spectrum Co-Location customers. During the time of the attack there was higher then normal latency across the Spectrum Internet and Co-Location network and some packet loss to areas of the internet. On net services and voice services were not effected by this attack.

This attack used a different attack vector then previously seen by Spectrum Staff and was not immediately detected on automated systems. As a result Spectrum engineering staff examined the network and discovered the type of attack using a manual process.

At Approximately 20:35 the attack vector was identified and the attack blocked. Normal latency was restored to the network at that time.

At Approximately 23:30 the newly identified attack vector was integrated into automated DDOS detection systems and our systems tested to insure a repeat attack would be more quickly identifiable.