1.

Solve : Friday fun?

Answer»

Just a FYI, I'm aware of the server issues and slowdowns currently being encountered. I've been looking into the issues. Sorry for the inconvenience. No problem.  Although it would be interesting to know what the problems were.I'm so ticked off i'll probably never talk to you again...Well once again ended up being a DDoS attack on port 80 from ip 86.9.89.104. Have had it blocked and reported.Just wondering who that may have been... Quote from: patio on October 15, 2010, 09:06:41 PM

Just wondering who that may have been...
I'm wondering if that's sarcasm or not, because I personally have no idea.

Nathan
Wouldn't it just be DoS, not DDoS, if it only came from one IP? I thought the extra D meant distributed, as in a whole group of people were doing it. Quote from: patio on October 15, 2010, 09:06:41 PM
Just wondering who that may have been...

A couple of names come to mind, but I'm not sure they are smart enough to pull a DOS attack off. Quote from: Helpmeh on October 15, 2010, 10:02:19 PM
Nathan
Wouldn't it just be DoS, not DDoS, if it only came from one IP? I thought the extra D meant distributed, as in a whole group of people were doing it.

You're absolutely correct. From what I could tell it was just one IP so off that logic it would be a DoS attack. Although seems like the server getting overloaded as it was that it was a BIGGER attack, but that single IP seemed to be the primary culprit.
Southeastern UK it seems. From an area south/southeast of London. Quote from: quaxo on October 17, 2010, 12:11:32 AM
Southeastern UK it seems. From an area south/southeast of London.

Tracert suggests that's a customer of the same cable and DSL company that I am with. The terms of service explicitly forbid that type of misuse. Of course they could have been INFECTED and recruited into a botnet, couldn't they?



Quote from: Salmon Trout on October 17, 2010, 02:09:09 AM
Tracert suggests that's a customer of the same cable and DSL company that I am with. The terms of service explicitly forbid that type of misuse. Of course they could have been infected and recruited into a botnet, couldn't they?

Yeah, I suppose, but that usually RESULTS in a distributed attack, doesn't it? This was just from 1 IP as CH and Helpmeh pointed out. Quote from: quaxo on October 17, 2010, 03:00:48 AM
Yeah, I suppose, but that usually results in a distributed attack, doesn't it? This was just from 1 IP as CH and Helpmeh pointed out.

A botnet of one; that is, a single (infected?) computer remotely controlled by somebody else...

I suppose it couldn't have been somebody practising with the ping command and UNINTENTIONALLY causing a flood? But I am confused. There are 3 VirginMedia fibre packages: down/up bandwidths in megabits are 10/1, 20/2 or 50/5. The last of these is quite expensive - 38 UK pounds (60 US dollars) a month. Also these upload speeds are 300% approx increases and have only just (30 Sep 2010) been announced; they are being rolled out across the network over the next few weeks. Many users are still on the old upload speeds. So (pardon my ignorance) how does one little guy in England at the end of a domestic cable connection overwhelm a server thousands of miles away? I thought that that the bandwidth of one domestic user would be so small, compared to the server where CH is hosted, that a single-IP DOS attack would be ruled out, but evidently I am missing something?


Quote from: Salmon Trout on October 17, 2010, 03:29:09 AM
A botnet of one

Technically, wouldn't that just be a bot and not a botnet?  Quote from: quaxo on October 17, 2010, 05:56:00 AM
Technically, wouldn't that just be a bot and not a botnet

Yes indeed; but still I am curious how it could SERIOUSLY disrupt a web server 4000 miles away?
Yeah...very good point Salmon...

Nathan, are you cheaping out on us?


Discussion

No Comment Found