Hackers slow Internet root servers with attack

Robert McMillan   Today’s Top Stories   or  Other Networking and Internet Stories  

Real-time collaboration and development with IBM® Rational® Team Concert streamlines any project Web Threats Don't Discriminate Simplifying the Data Center Network Designed to Manage Lean Principles The 2008 ERP in Manufacturing Benchmark Report Summary Implementing VMware Server Virtualization on Juniper Networks Infrastructure Computerworld Report- Large Enterprises Pay More for IPAM Mobility @ the Speed of Business Compterworld Technology Briefing: Intelligent Users Use Business Intelligence Sign up to receive Networking and Internet Resource Alerts

February 7, 2007 (IDG News Service) -- Online attackers have briefly disrupted service on at least two of the 13 "root" servers that are used to direct traffic on the Internet.

The attack, which began Tuesday at about 5:30 a.m. Eastern time, was the most significant attack against the root servers since an October 2002 distributed denial-of-service (DDoS) attack, said Ben Petro, senior vice president of services with Internet service provider Neustar Inc. Root servers manage the Internet's Domain Name System (DNS), used to translate Web addresses such as Amazon.com into the numerical Internet Protocol addresses used by machines.

The attack appeared to have been launched by a group of compromised PCs, called a botnet, Petro said.

"Two of the root servers suffered badly, although they did not completely crash; some of the others also saw heavy traffic," said John Crain, chief technical officer with the Internet Corporation for Assigned Names and Numbers (ICANN), in an e-mail interview

The two hardest-hit servers are maintained by the U.S. Department of Defense and ICANN, he added.

The botnet briefly overwhelmed these servers with useless requests, causing them to occasionally hang, but did not disrupt Internet service, Petro said. By 10:30 a.m., Internet service providers were able to filter enough of the traffic from the botnet machines so traffic to and from the root servers was essentially back to normal.

Compared to other DDoS attacks, this one did not have a lot of firepower. Petro said the bandwidth of the attack could be measured in megabytes, as opposed to the gigabyte-level attacks that are now frequently seen. "It was a small attack, but it was focused and targeted at the roots," he said.

It is unclear where the attack originated, Crain said. "The effect of this traffic on the end users was negligible," he added.

Petro said engineers are still "scratching their heads" about the reason for the attack. Although some DDoS attacks are launched for political reasons or to extort money from Web site owners, this one appeared to have no such purpose, he said.

Crain ventured a guess as to the attack's effect, however. "I suspect that the largest effect of the DNS traffic was to deprive some engineers of sleep and generate press," he wrote.

Reprinted with permission from

IDG.net
Story copyright 2008 International Data Group. All rights reserved.

Print this Story

Send Us Feedback

E-mail this Story

Digg this Story

Slashdot this Story

"The latest figures from Nielsen Online are out for the search market, and it's good news for Google, and bad..." Read more... "Fedora 10 is here and it already looks like a great cutting-edge, not bleeding-edge, Linux distribution...." Read more... Read more Networking posts or See all Blogs

Microsoft releases Vista SP2 beta IBM wants info from Apple execs in Papermaster case 7 ways to cut your software costs during the economic downturn More top stories...

Obama's DHS pick may find support for raising H-1B cap at confirmation hearing Report: Former AOL chief exec tries to raise funds to buy Yahoo Apple's antivirus advice 'big to-do about nothing,' says researcher

Review: The new MacBook Air, now with extra SSD goodness Thin as ever, the latest Air offers up to twice the storage and snappy performance. Cool Stuff: Your 2008 Holiday Gift Guide We've got an array of economical, expensive, and just plain weird tech gifts for your friends and family. Massive botnet returns from the dead, starts spamming The spam-spewing 'Srizbi' botnet that was shut down two weeks ago has been resurrected and is again under criminal control, say security researchers. Elgan: Why you can't trust 'friends' on Facebook Facebook is popular and growing -- especially with criminals. Here's why they love it. Windows 7 Get the latest news, reviews and more about Microsoft's newest desktop operating system More Continuing Coverage Windows 7 Voting Technology Google's Chrome browser Economy in turmoil: Latest news and tips iPhone 3G Bill Gates moves on Windows Vista A to Z Mac A to Z 2008 Salary Survey Find wage data for 50 IT job titles. More Special Reports 2008 Premier 100 IT Leaders 2007 Premier 100 IT Leaders 2008 Best Places to Work in IT 2007 Best Places to Work in IT 2008 Salary Survey 2007 Salary Survey 2006 Salary Survey 2008 IT Forecast 2007 IT Forecast 40 Years of Computerworld Top 12 Green-IT Users The FAQs About Going Green IT Schools to Watch iPhone: One Year Later Global Mobile Your Next Data Center Management: Reinventing IT Stop Data Leaks Web 2.0 Security Surviving Disasters Managing Storage Virtualization The Lean Storage Machine Storage on Trial Can Web 2.0 Save BI? Bypass These BI Potholes All Zones Business Continuity Zone The File Data Management Zone Security Management Zone The SAS Zone Business Intelligence and Analytics Zone The Enterprise Search Zone Software as a Service Zone The Security Zone See your link here

Advance your BlackBerry(R) solution management know-how this July Advance your BlackBerry(R) solution management know-how this July BlackBerry Technical Seminar, register today! Go to the webcast  Cut Data Center Energy Costs Get this white paper now! (Source: Liebert) Cooling accounts for 35% of data center energy consumption. Discover strategies that can reduce cooling energy costs by as much as 40%, including simple steps you can take to get more from your existing cooling system and emerging technologies that can increase cooling capacity and data center density. Download this white paper  Computerworld Executive Briefing: Automating Network Management Download this Executive Briefing now (a $195.00 value), compliments of ProCurve Networking by HP. (Source: Computerworld) This briefing looks at the basics of network management, which tend to get lost in the dizzying array of products and processes. It also examines new tools that are on the way to help IT executives deal with management in the new era of automation.Download this Executive Briefing now (a $195.00 value), compliments of ProCurve Networking by HP. Download this executive briefing  White Papers Read up on the latest ideas and technologies from companies that sell hardware, software and services. The 2008 ERP in Manufacturing Benchmark Report Summary IronPort Web Reputation Filters Tech Note Designed to Manage Lean Principles View more whitepapers

• Microsoft releases Vista SP2 beta
• Obama's DHS pick may find support for raising H-1B cap at confirmation hearing
• IBM wants info from Apple execs in Papermaster case
• More top stories 

Accelerate your pursuit of perfection For almost 80 years, Kodak has been helping banks, insurance companies, healthcare providers, government agencies and other businesses produce billions of document images. So Kodak is uniquely positioned to know and deliver–what customers want: easy-to-use scanners that output the best possible image quality. Download this white paper now!