jema
|
Server under attack againStarted in the early evening yesterday, and is still being clobbered, I have countermeasures that are keeping things live, but the attack is fairly heavy.
|
Jonnyboy
|
Good luck, I have the tinfoil hats ready.
|
Penny
|
I can ney hold her together much longer captain
|
Behemoth
|
Oh for a photon torpedo or two.
|
jema
|
or about 400 which seems to be the total size of the botnet
|
bingo
|
| Jonnyboy wrote: | | Good luck, I have the tinfoil hats ready. |
Me too and have ti foiled all of the electrical stuff in the house in true Joe from eastenders style.
|
Becki
|
Is it clingons?
|
RichardW
|
| Becki wrote: | Is it clingons?  |
You dont need tinfoil for those just plain old bog paper
Justme
|
Penny
|
| Becki wrote: | Is it clingons?  |
On the starboard bow in their hundreds
|
jema
|
Back on topic
At the peak there were more than 450 concurrent attacks by my reckoning. e.g. 466 different IPs involved.
We are now down to about 50, which is a drop the the 120-150 or so that were hitting us until just a few minutes ago.
|
vegplot
|
| jema wrote: | Back on topic
At the peak there were more than 450 concurrent attacks by my reckoning. e.g. 466 different IPs involved.
We are now down to about 50, which is a drop the the 120-150 or so that were hitting us until just a few minutes ago. |
Can you not kill the DDOS attack at the router level?
|
jema
|
Does not work like that with the servers.
We can to some degree firewall at the actual server.
|
vegplot
|
| jema wrote: | Does not work like that with the servers.
We can to some degree firewall at the actual server. |
Yikes, very hands on. Good luck!
|
jema
|
it is over for now anyway, or to be accurate down to a very very few.
|
Jamanda
|
Jema, can I ask exactly what happens during an attack? I don't understand at all.
|
vegplot
|
| Jamanda wrote: | Jema, can I ask exactly what happens during an attack? I don't understand at all.  |
When you visit a web page you browser send requests to the server hosting the website for the web files. Web servers are used to dealing with reasonably large number of site visitors without any undue problems.
However, there are some instances when a server, or a single web site, is the target for an atttack. It would be difficult for a single user, you for instance, to generate enough requests to slow down a server. So the attacker uses a distributed network of infected machines (users PC's) to do that job for them.
It can be very nasty if the attack is large and prolonged. Some high profiles sites have been down for days during such an attack.
|
Jamanda
|
So what causes it. Does some malicious person decide they are going to attack DS, or is it random?
|
vegplot
|
| Jamanda wrote: | | Does some malicious person decide they are going to attack DS |
Most are deliberate attacks, but others can be random.
The reasons are varied:
* Cyber warfare between opposing groups of malicious coders proving how good they are
* Criminal gangs disrupting system for personal gain
* Intercountry cyber warfare (I'm not sure this has ever been proven)
* Competitors
* Because they can
* Have a grudge
and a host of other reasons.
|
jema
|
You never know quite what, I do know that over the last few weeks I discovered some extremely nasty forums on the free forums system and killed them off, so may be that has provoked something
|
Slim
|
They're just jealous of our stunning wit and good looks
|
jema
|
Well over two hours now since anything got as far as hitting the web server.
This was not to be clear an attack on downsizer.net, but an attack on the server we are on.
With servers you have two choices, we could be on my little UK based Trillian server that is cheap and cheerful and by virtue of doing little aside from downsizer.net might even be faster most of the time.
Or we can be on one of my very powerful servers along with a lot of other things and risk being caught up in attacks against the server itself or sites other than downsizer.net.
You might think it obvious to go with the little server, but with a little server if an attack does take place, or even if something suddenly proves especially popular on the site, then the small server struggles a lot more badly. Everything about the big server from the hardware to the support is better geared to dealing with trouble when it arises.
|
Slim
|
just glad there's someone behind the scenes making it all keep flowing!
|
cab
|
| cpg03 wrote: | just glad there's someone behind the scenes making it all keep flowing!  |
Theres a reason why he's got a wizard for an icon. He's quiet about this kind of thing, and he doesn't always get the thanks he deserves.
|
Rob R
|
| cab wrote: | | and he doesn't always get the thanks he deserves. |
If ever
|
Jamanda
|
Thank you Jema
|
sean
|
| Rob R wrote: | | cab wrote: | | and he doesn't always get the thanks he deserves. |
If ever |
He does, he's been allowed to sleep in the house for months and months now.
|