The site has been up and down all day today dealing with a denial of service attack. Congrats to the fucker that is making my life miserable. Hope you're proud of yourself.
I banned 64 very large networks from accessing our server today. There are more on the way apparently. Sorry if you've been caught up in this. (I guess you wouldn't be able to read this if you can't get to the server.)
Drew, Thanks for the hard work! I've been trying to log on for the better part of the afternoon and thought the plug had been pulled on ADT..... Shocking! Just shocking!
Nothing new, just not something I've had to deal with before. Kinda a pain in the butt but things seem to be back to normal, for now. I counted over 200 different IP addresses across over 60 different networks hitting the site multiple times per second. Must be a zombie bot attack or something. I don't know if we're being targeted or if we're a random casualty.
Matchmaker is probably shitting out his butt. If he's missing out on ADT for this long, he ain't gonna be all smiles and thumbs up when he's able to get on again. I'll tell you that much. No, wait, he'll still be all cheerful. It's how they make Canadians. Still, I'm sure he fell asleep in front of his computer muttering out curses in spurts of two, three or four words. And sometimes ten words.
I just checked and the attack is still running. It's changed a bit in that there are network packet attacks in addition to the denial of service attack on the ADT website. Sorry to the folks that can't access ADT.
I've been working on reconfiguring the firewall this morning. I have temporarily lifted the network bans to see if the firewall can defeat the attacks by itself.
First time I've been able to see the site since sometime yesterday. I wish you lots of luck in getting rid of this and to those responsible, may U be subjected to nonstop loops of Glen Beck speaking!!
Wheee. I just managed to get back on the site. Haven't been able to access it for nearly 48 hours. I actually got some reading done. Good luck fighting the attackers Drew.
I had no idea what was going on. I thought the site was down for everyone. I saw Drew's first message yesterday and then ADT was "gone" for me for the rest of the day.
The attack is still ongoing but the firewall appears to be catching most of it and the web server is now setup to ignore anything else that makes it through. The firewall is blocking about 2500 packets per second now as part of this distributed denial of service attack. I'm going to start notifying the abuse contacts at the various network owners tonight. Maybe they will shut down at least some of the zombie systems involved in the attack.
BTW, this isn't a simple script kiddie attack. This is coming from 64 different networks at last count. This is someone that has access to an army of zombie computers. I have no idea if we're a specific target or if we're just lucky like that.
It might not be too crazy-sounding, but the Glenn Beck supporter theory is possible. Not that hard to find and hire Russian and Chinese hackers to do something like that. I've been offered such services from Russians (for spamming) before. :( Keep up the great work Drew!
Thanks for all your hard work, Drew. That was a bit of a pain Friday. "I do not as a rule seek advice about food from thin people..." - Jeffrey Steingarten
^ They probably belong to people who went on vacation and left their computers online. Either that, or they're so used to their PC's behaving badly that one more vampire doesn't even register.
Little Puck Interview
Posted - Aug 27 2010 : 2:37PM
