PDA

View Full Version : Network Under Attack



skip to my lou
28-10-2004, 02:05 AM
Network is under attack. It is a DDoS (Distributed Denial of Service) attack to be specific. All the connections, (OC48[SBC], OC3[Savvis], OC3[Verio]), are being flooded like anything. You may experience slow loading till the attackers are null routed.

JGB
28-10-2004, 03:22 PM
...You may experience slow loading till the attackers are null routed.

Null routed,? I would waste these bast*ards! What would someone gain from attacking this server?

Garvinator
28-10-2004, 03:52 PM
Null routed,? I would waste these bast*ards! What would someone gain from attacking this server?
on an old server, we were attacked by brazilians and lost a whole heap of information.

eclectic
28-10-2004, 04:04 PM
on an old server, we were attacked by brazilians and lost a whole heap of information.

let's hope that the source of the problem is not "closer to home"

;)

eclectic

skip to my lou
28-10-2004, 04:15 PM
Null routed,?

DoS is nothing but flooding a connection with useless packets, so that legit users cannot access the network. DDoS is where the source of the attack is distributed, not coming from on IP address. This is much harder to control. Null routing is basically killing packets (or sending packets to a non-existant node) received by attackers. The null routing is done at the providor level.


I would waste these bast*ards! What would someone gain from attacking this server?

It wasn't our server, simply another server on the same network.

skip to my lou
28-10-2004, 04:17 PM
on an old server, we were attacked by brazilians and lost a whole heap of information.

That's cracking and not DDoSing. DDoS is impossible to prevent, and very hard to cure.

skip to my lou
28-10-2004, 04:19 PM
let's hope that the source of the problem is not "closer to home"

;)

eclectic

No one from Australia could have made such an attack. Our pipes are simply not big enough.

skip to my lou
15-02-2005, 09:50 PM
(our) server under attack since 9PM. Everything seems to be back to normal now.

JGB
15-02-2005, 10:02 PM
(our) server under attack since 9PM. Everything seems to be back to normal now.

Any way of tracing it? Could it be based from within Australia? Or is it those Brasilian tossers again?

skip to my lou
15-02-2005, 10:33 PM
Any way of tracing it? Could it be based from within Australia? Or is it those Brasilian tossers again?

Attack is from two places. One is Victoria through bigpond and the other is from Sydney through Optus.

JGB
15-02-2005, 10:37 PM
Attack is from two places. One is Victoria through bigpond and the other is from Sydney through Optus.

What two working together? So its organised?

skip to my lou
15-02-2005, 11:20 PM
What two working together? So its organised?

Perhaps, perhaps not. Cannot be 100% sure... could even be someone in adelaide or perth who has control over nodes in melbourne/sydney...

skip to my lou
16-02-2005, 02:03 PM
Got some more flooding today. All blocked & fixed now.

Rincewind
16-02-2005, 02:30 PM
Got some more flooding today. All blocked & fixed now.

Good job. I did notice fairly slow responses todaym, they seem to be much better now.

skip to my lou
27-02-2005, 11:55 AM
Some SYN packet flooding 12:30 - 12:45. Taken care of now.

skip to my lou
27-02-2005, 01:26 PM
Another attack, this time blocked within few minutes.

Trent Parker
28-02-2005, 01:16 AM
What does flooding do?

skip to my lou
28-02-2005, 09:11 AM
Crashes the server at worst, else no one else can use the server.

ElevatorEscapee
07-04-2005, 10:07 PM
Um... can you ascertain whether or not the miscreants are trying to crash the Netlogics server (which may indicate a commercial attack) or chesschat? (which may actually indicate an attack on us all). :(

skip to my lou
07-04-2005, 11:33 PM
On chesschat. Though most of the time attacks are from rooted boxes or worms, which isn't intentionally directed at us, but we still face the consequences.

skip to my lou
24-02-2006, 11:35 PM
Another attack - issue has been resolved.

ElevatorEscapee
26-02-2006, 09:33 AM
Hmmm, that's almost at exactly the same time as 12:00 months ago. I wonder if that's just a coincidence.