Page 1 of 1
Most users online fixed
Posted: 2004-12-30 10:43pm
by Darth Wong
The "most users online" count skyrocketed to 1721 this afternoon as a result of what was effectively a DDOS attack. After blocking it, I copied the "most users online" data from the Archives in order to restore the pre-attack value. Just in case you were wondering about that.
Posted: 2004-12-30 10:44pm
by Ghost Rider
Cool...at least it's back to it's true number and not the bloated DDOS attack one.
Glad that only lasted for a few hours and din't cause anything from what appears permanent.
Posted: 2004-12-30 10:51pm
by J
I was wondering why the board was so slow and finally stopped loading for a while this afternoon....a DDOS attack would do the trick.
Posted: 2004-12-30 11:57pm
by Laird
Banned Shakkara finally?
Posted: 2004-12-31 12:21am
by Darth Wong
For those who are curious about the technical details, it was the "Santy" worm. The worm was not capable of penetrating this system because it was patched as soon as the vulnerability became known to the public, but as is often the case with widely deployed software, you can patch your own box but the rest of the Internet won't bother. So the worm infects unpatched systems and then generates massive traffic as it attempts to propagate itself.
In other words, the software was patched so it was not vulnerable to the worm, but we were still vulnerable to the sheer traffic generated by the worm as it mindlessly searched for victims. I blocked the worm in .htaccess; hopefully we won't be seeing another variant outbreak on a similar scale using a different request string.
Posted: 2004-12-31 07:53am
by Faram
And here I am thinking that perhaps this image would be the next one I would see.
That's a screenshot of Santy in action...
Should have known better, you subscribe to Secuina rite?
Posted: 2004-12-31 10:20am
by Alyeska
Laird wrote:Banned Shakkara finally?
Actualy banning Shakkara would INCREASE the traffic to the board. She doesn't bother with DOS attacks on boards she has open access to.
Posted: 2004-12-31 10:46am
by Tribun
What is a DDOS attack?
(Does it mean "Direct Disk Operation System-attack"?)
Posted: 2004-12-31 10:52am
by Sarevok
It is called denial of service attack, basicaly overloads a site with immense traffic.
Posted: 2004-12-31 10:53am
by Tribun
The Shadow wrote:It is called denial of service attack, basicaly overloads a site with immense traffic.
Spamming a site into oblivion?
Posted: 2004-12-31 11:05am
by Sarevok
Yeah something like that.
Posted: 2004-12-31 12:48pm
by Dalton
DDoS (Distributed Denial of Service) happens when a whole bunch of computers is infected with a worm and then at a certain point someone instructs each computer to constantly ping a certain website, causing a denial of service.