|Ticket Number:||20160607_1||Ticket State:||CLOSED|
|Ticket Opened:||2016-06-07 00:25||Ticket Closed:||2016-06-09 14:16|
|Ticket Description:||DDoS attack against UniGE|
Problem Description:This night at 23:15, a DDoS attack towards the host raft.unige.ch started. As a collateral damage, the SWITCHlan access port of the UniGE was saturated which left the UniGE unreachable. At 23:38 and 0:09, we installed ACL filters on our border routers to filter all UDP traffic towards raft.unige.ch. Since 0:09, the UniGE is reachable again.
Please note that the SWITCH CERT team will contact the security team at the UniGE separately. Please let us know as soon as you wish the ACL filters to be removed from our border routers.
Affected:From 2016-06-06 23:15 until 2016-06-07 00:09
Impact: Partial loss of connectivity
Service: network access
Soon after installing the ACL filters mentioned above, the attack stop and traffic went down to a normal level. This case has been discussed with the customer's security team. Closing ticket.
For all questions about this ticket, please send mail to firstname.lastname@example.org
or call +41 44 268 15 30.