Page 2 of 3

Re: Down?

Posted: Wed Apr 04, 2012 10:38 am
by Christel
Support team says the attack is coming from a different IP now. They are of course doing their best.

Maybe this will be one of those days, we are here and then we are not...we are here and then we are not...

Re: Down?

Posted: Wed Apr 04, 2012 10:41 am
by Polchraine
Spoke with a friend who owns and runs a hosting service for major corporates along with an interconnect service and they have been suffering some major attacks over night for the past week. Unbelievably, the European Telco that runs the network they are originating from has been refusing to block the transmissions!

Re: Down?

Posted: Wed Apr 04, 2012 10:43 am
by Christel
Maybe some important IPs are on that network?

Thing is...I fail to understand the point of this unless it is pure malice.

Re: Down?

Posted: Wed Apr 04, 2012 10:53 am
by Polchraine
christel wrote:Maybe some important IPs are on that network?

Thing is...I fail to understand the point of this unless it is pure malice.
He will not say exactly who he hosts although I do know of a few and they include various household names for white goods, food & cleaning products, computer manufacturers, and more ...

Malice - or boredom!

Re: Down?

Posted: Wed Apr 04, 2012 10:55 am
by ovenpaa
The denial of service could be for several reasons, someone may disagree with the content of one of the hosted sites, they could have a problem with the hosting company itself and they could be doing it to force a restart of servers or upstream devices because of a zero day exploit they are targeting.

Of course they may also be doing it because they can but that is unlikely.

These days dDOS attacks are invariably from Botnets, in other words machines that have malicious applications being run on them that allow them to be remotely called to perform functions including sending spam and DOS attacks. The interesting part is such networks of machines are commercially controlled and you can expect to pay several thousand USD to call up machines to perform a dDOS.

In the good old days you just sent malformed packets and waited for the remote machine to stall out ;)

Re: Down?

Posted: Wed Apr 04, 2012 10:56 am
by Christel
Thinking out loud here with my limited knowledge of IP ranges, surely it must be doable to block a range to prevent attack and omit the important few?

Re: Down?

Posted: Wed Apr 04, 2012 10:57 am
by ovenpaa
Polchraine wrote:He will not say exactly who he hosts although I do know of a few and they include various household names for white goods, food & cleaning products, computer manufacturers, and more ...

Malice - or boredom!
I can see a couple of mates from European CERT's on MSN now, I will ask them what is going on.

Re: Down?

Posted: Wed Apr 04, 2012 12:33 pm
by whoowhoop
And I had put this morning's failure ( and general sluggishness of my poor system) down to the fact that it had rained overnight...

Often use to be the cause in my road. Rain would cause so many electrical items, phones, pc's, boilers, tv's etc to crash and burn, on top of the bi-monthly power outtages, that we gave up trying to replace certain items.

Re: Down?

Posted: Wed Apr 04, 2012 12:35 pm
by ovenpaa
Power and water outages seem to be the norm in our neck of the woods.

Trouble accessing the site.

Posted: Wed Apr 04, 2012 1:11 pm
by Jenks
Has anybody had trouble accessing the site? this is the first time I have been able to log on today. I have had siilar trouble on several occasions recently.

Jenks