This attack has been continuing for over 24h.
It looks like a sustained co-ordinated attack.<p>They are possibly monitoring JANET response team tweets to adjust their actions: <a href="https:&#x2F;&#x2F;twitter.com&#x2F;jiscmi&#x2F;status&#x2F;673835355683057664" rel="nofollow">https:&#x2F;&#x2F;twitter.com&#x2F;jiscmi&#x2F;status&#x2F;673835355683057664</a><p>This directly affects ALL UK University networks: both outgoing from their networks and incoming traffic.<p>The economic impact must be fairly large.
This makes me think this is not just a random attack but a state or large non-state actor.