(Page 2 of 2)
CyberBunker Takes Credit
To counter the attack, CloudFlare used a technology called AnyCast, in which the company's data centers around the world present the same IP address, and the traffic is redirected -- and thinned out -- among the centers. In retaliation, the attackers directed their fire directly at CloudFlare, and then moved upstream to attack CloudFlare's bandwidth providers. The overflow caused major problems for Internet users, particularly in Europe.
The New York Times reported that CyberBunker has taken credit for the attack. The Dutch Web site hosting service has noted that "nobody every deputized Spamhaus to determine what goes and does not go on the Internet." Spamhaus, however, only offers lists to e-mail providers, who then determine which sources to block.
'Fat, Juicy Target'
CyberBunker's Web site boasts that "Dutch authorities and the police," as well as a Dutch SWAT team, have "made several attempts to enter the bunker by force," but none of the attempts were successful. The company is housed in a building referenced by its name --
a five-story former NATO bunker.
Peter Firstbrook, an analyst at Gartner, noted that "DNS is a pretty big, fat, juicy target," and added that, overall, it is not yet "a secure technology." He pointed out that CyberBunker "is not really serving its own interests" in this kind of attack.
To shame hosting providers into securing their DNS, CloudFlare has been publishing the names of providers that maintain the largest number of unsecured DNS resolvers, a tactic which the company said has decreased open DNS resolvers by 30 percent over four months.