CAIDA: Data Confirms DDoS at SCO
12th December, 2003
A data-based analysis of SCO's web site by the Cooperative Association for Internet Data Analysis (CAIDA) has found that this week's outage was related to a distributed denial of service attack (DDoS). Data collected by CAIDA's Network Telescope indicates that the sco.com site responded to more than 700 million attack packets over 32 hours, according to the analysis.

"Early in the attack, unknown perpetrators targeted SCO's web servers with a SYN flood of approximately 34,000 packets per second," CAIDA said. "Together www.sco.com and ftp.sco.com experienced a SYN flood of over 50,000 packets-per-second early Thursday morning."
SCO's statement attributing its outage to a DDoS attack had been widely questioned following a critique of the SCO press release at the Groklaw web site. CAIDA has previously used its technology to document Internet traffic events including the Code Red and Slammer worms.

A dynamically updating graph is available here.
Posted by Rich Miller in Performance, Security
Related News
Outages Continue at SCO
15 Dec 2003
Performance, Security
The web site outages continue at SCO, which was unreachable for much of the weekend and is currently experiencing its fourth incident of extended downtime since it came under a distributed denial of service (DDoS) attack last Thursday. A dynamically...
View full post
DDoS takes SCO Site down
10 Dec 2003
Performance, Security
SCO said its web site has been knocked offline by a distributed denial of service attack (DDoS), and remains unavailable more than eight hours after the attack began. A dynamically updating graph is available here. The site has been down since 4:20 a.m....
View full post
Further DDoS Attack on Rackspace?
30 Aug 2003
Hosting, Performance, Security
Rackspace's site was down for around two and a half hours early this morning [BST], in what may likely have been a repeat of Tuesday's distributed denial of service attack. The response times to our own performance collector on Rackspace's network...
View full post