SUCKAGE: Got | Apex?'s server being flood attacked

[Apex]

This is seriously pissing me off.

[Jeffbx]

Where are you hosting? Firewall in place? What kind?

[hapoo]

It didn't really effect me Apex, cause my POS DSL was down the whole time. :(


(I bet anand is doing the flooding!!! :D)

[sbp]

The good tech site Adrian's Rojak Pot (http://www.rojakpot.com) was also hit yesterday but with worse results:

"Would you believe it??? Adrian's Rojak Pot was actually hit by a massive Denial Of Service attack! Luckily, our host and guardian angel (mua! mua! mua!!!), Crowz, caught it and prevented them from crashing the server.

Unfortunately, after 31GB of bandwidth worth about USD 28,000 was lost to the attackers, Crowz was forced to cut the line. But as you can see, ARP is back on its feet and running again at 100% capacity!

I have no idea why these people did what they did. All we have now is a bunch of IPs recorded during the attack. As far as we can tell, about 50 people from countries like Spain, Russia, Germany and... NORWAY were attacking this site since 1:48 AM US Central Time till about 3:00 AM when Crowz shut ARP down.

Right now, let's not speculate on their motives in trying to bring down ARP. Although I don't think we have pissed off that many people, it's hard to believe we were randomly selected. We are now gathering more information so hopefully, we will have a clearer picture of why we were hit.

If you have an idea why we were attacked, do drop me a message. I think it's quite probable this was all planned and coordinated in an open forum. It's rather hard to orchestrate 50 people from various countries through just e-mail, isn't it? ;)"

[Edited by sbp on 02-09-2001 at 10:08 PM]

[giambona]

i used to have some sites hosted at http://www.vservers.com They were pretty good, and tech support is impressive.

[topane]

I can't believe ppl still get their kicks doing this crap...Get a life!

[TheCorp]

Hey guys ... Apex's host here (RealGN) and we are the ones getting blasted here by the damn hacker(s). Why the ambiguity? Well, we aren't sure whether it is one person or more than one. The fact that bandwidth is a pretty large amount (still not half as much as our September attack) makes it seem like more than one person, but the fact that it isnt consistant and only happens during non school times makes us think it is one person, or one controlling many.

Needless to say, the amount of attacks has dropped after the hackers noticed they cant break into our system. Essentially, from what the other admins have been telling me, they are blasting our telnet port with ping floods and such in an attempt to break in and get root access to the server. Normally this would work, but since our host has such a large connection, there is no real way to overload us to the point that we can get broken into. So all data should be safe unless they start brining bigger stuff.

On the other hand, whenever they are flooding us (about 3.5-5 megabits/sec) things do get slow as our webserver starts getting overloaded with fake requests and thus cant serve up information to our real visitors. We are working at the moment on soem software that will be able to isolate the offending IP (which is near impossible btw) and work on blocking it. Past that, there really isnt all that much we can do, even huge companies like MS and Yahoo get hit byt the same attacks too. Why these people have something against us is beyond me. Of course there is always the chance that this is just the work of some l33t hax0r 12 year old and his IRC groupies... If that is the case, well I would kill to find out where these guys live.

Anyways, we are working on getting through this as best as possible, while minimizing the damage to our pocketbook as base as we can. What most people don't know is that flood attacks really start adding up to our monthly bandwidth. Well, hope this ends soon, and damn hackers =(

Jason "TheCorp" Joseph
- Your "other" favorite admin

[cookie_monster]

i can't believe a bunch of comp nerds have that much time on their manos...sheesh

[helius]

Most of the attacks are made by script kiddies. Unfortunately you don't really need that much time to download/run those... :(