DDoS attack - Techwatch Support Forums: Digital & Satellite TV, FTA, Cable, Computers, Mobile Phones, Apple and General Tech Forums

brian · 09-09-09, 10:31 AM

Apologies for the downtime this morning - datacentre got me up at 05:40 this morning to tell me they would have to block access to TW because a 2.5Gbps DDoS attack had started.

We had this problem earlier this year, and did move to a new datacenter that claimed to be able to deal with DDoS attacks - however, the unfortunate result was over-filtering of traffic, which resulted in page errors and some areas of the UK being blocked.

Now looking at two options: traffic filtering on this server, or else trying out another datacenter - first option will be less painful, but am reserving the second option.

Either way, it could get rough later and over the next couple of days, but I'm afraid there's little I can do about it at present. However, I'm already making preparations for an emergency server move tomorrow into a DDoS filtered zone if required and can be set up in time.

My sincere apologies for this - I know it's a total pain, but once I know what my best options are I can get them in place and hopefully leave us far more solid.

MorriSoft · 09-09-09, 11:47 AM

Quote:

Originally Posted by brian

Apologies for the downtime this morning - datacentre got me up at 05:40 this morning to tell me they would have to block access to TW because a 2.5Gbps DDoS attack had started.

We had this problem earlier this year, and did move to a new datacenter that claimed to be able to deal with DDoS attacks - however, the unfortunate result was over-filtering of traffic, which resulted in page errors and some areas of the UK being blocked.

Now looking at two options: traffic filtering on this server, or else trying out another datacenter - first option will be less painful, but am reserving the second option.

Either way, it could get rough later and over the next couple of days, but I'm afraid there's little I can do about it at present. However, I'm already making preparations for an emergency server move tomorrow into a DDoS filtered zone if required and can be set up in time.

My sincere apologies for this - I know it's a total pain, but once I know what my best options are I can get them in place and hopefully leave us far more solid.

Have we found out anything more about these attacks, and the reasons behind them or are they similar to the reasons given previously?

radtv · 09-09-09, 12:31 PM

Yes there seems to be a lot of this going on at the moment, I think its being done to sites and forums that sell or have cable talk. I know that Lee at Wizard is having the same issues.

Analoguesat · 09-09-09, 12:53 PM

satellites.co.uk was very slow first thing this morning - and cable is strictly forbidden there

MorriSoft · 09-09-09, 03:26 PM

So no particular group or person is claiming responsibility then? Or, at least, as far as we know?

Might sound like a conspiracy thoery here, but is it at all possible that VM could be behind it, even if indirectly?

Danielle · 09-09-09, 03:48 PM

Quote:

Originally Posted by MorriSoft

So no particular group or person is claiming responsibility then? Or, at least, as far as we know?

Might sound like a conspiracy thoery here, but is it at all possible that VM could be behind it, even if indirectly?

nah.... pound to a pinch of poo the attacks originate in eastern europe

MorriSoft · 09-09-09, 04:03 PM

Quote:

Originally Posted by Danielle

nah.... pound to a pinch of poo the attacks originate in eastern europe

But then why, for what purpose, what do they gain by bringing the forums down?

Danielle · 09-09-09, 04:18 PM

Quote:

Originally Posted by MorriSoft

But then why, for what purpose, what do they gain by bringing the forums down?

Blackmail

MorriSoft · 09-09-09, 04:29 PM

Quote:

Originally Posted by Danielle

Blackmail

Figures.. =\

Analoguesat · 09-09-09, 04:45 PM

Dunno if its blackmail this time - but Brian has told us in the past demands were made for money:

Back online!

post 16.

So theres a good chance it will be again.

Of course paying a single bent eurocent to the knobheads behind the attacks is a spectacularly bad idea as the attacks will certainly increase as will the demands for more money.

If its the same bunch as before we will just have to ride out the worst of it and hope Brian & the data centre hosting the servers can find some way to limit the effect of the attacks.

Until then if you find the forum unavailable just try again in an hour - it will come back up sooner or later.

09-09-09, 10:31 AM	#1 (permalink)
brian Administrator Join Date: Apr 2006 Location: Inverness, Scotland Posts: 3,801 Thanks: 286 Thanked 1,697 Times in 595 Posts	DDoS attack Apologies for the downtime this morning - datacentre got me up at 05:40 this morning to tell me they would have to block access to TW because a 2.5Gbps DDoS attack had started. We had this problem earlier this year, and did move to a new datacenter that claimed to be able to deal with DDoS attacks - however, the unfortunate result was over-filtering of traffic, which resulted in page errors and some areas of the UK being blocked. Now looking at two options: traffic filtering on this server, or else trying out another datacenter - first option will be less painful, but am reserving the second option. Either way, it could get rough later and over the next couple of days, but I'm afraid there's little I can do about it at present. However, I'm already making preparations for an emergency server move tomorrow into a DDoS filtered zone if required and can be set up in time. My sincere apologies for this - I know it's a total pain, but once I know what my best options are I can get them in place and hopefully leave us far more solid.

09-09-09, 12:31 PM	#3 (permalink)
radtv Senior Member Join Date: Jul 2006 Posts: 2,739 Thanks: 90 Thanked 362 Times in 305 Posts	Re: DDoS attack Yes there seems to be a lot of this going on at the moment, I think its being done to sites and forums that sell or have cable talk. I know that Lee at Wizard is having the same issues. __________________ Before you buy contact or visit www.redappledigital.co.uk on 0800 612 5117. We try hard not to be beaten on price!

09-09-09, 12:53 PM	#4 (permalink)
Analoguesat manic midlander retired mod Join Date: Jan 2006 Location: Scottish Borders Posts: 11,668 Thanks: 21 Thanked 1,339 Times in 990 Posts	Re: DDoS attack satellites.co.uk was very slow first thing this morning - and cable is strictly forbidden there __________________ Basic forum rules for both satellite & cable: no keys no patches no offering or asking for card shares Anyone pm'ing me for details of card sharing or anything to do with hacking cable will be banned immediately Analogue forever!!

09-09-09, 03:26 PM	#5 (permalink)
MorriSoft Senior Member Join Date: Feb 2009 Location: Midlands - Pure n*l Posts: 1,903 Thanks: 121 Thanked 365 Times in 319 Posts	Re: DDoS attack So no particular group or person is claiming responsibility then? Or, at least, as far as we know? Might sound like a conspiracy thoery here, but is it at all possible that VM could be behind it, even if indirectly? __________________ All posts are of a hypothetical nature..

09-09-09, 04:45 PM	#10 (permalink)
Analoguesat manic midlander retired mod Join Date: Jan 2006 Location: Scottish Borders Posts: 11,668 Thanks: 21 Thanked 1,339 Times in 990 Posts	Re: DDoS attack Dunno if its blackmail this time - but Brian has told us in the past demands were made for money: Back online! post 16. So theres a good chance it will be again. Of course paying a single bent eurocent to the knobheads behind the attacks is a spectacularly bad idea as the attacks will certainly increase as will the demands for more money. If its the same bunch as before we will just have to ride out the worst of it and hope Brian & the data centre hosting the servers can find some way to limit the effect of the attacks. Until then if you find the forum unavailable just try again in an hour - it will come back up sooner or later. __________________ Basic forum rules for both satellite & cable: no keys no patches no offering or asking for card shares Anyone pm'ing me for details of card sharing or anything to do with hacking cable will be banned immediately Analogue forever!! Last edited by Analoguesat; 09-09-09 at 06:00 PM. Reason: typo!

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Facebook suffers another Koobface attack	Internet News	Internet	1	31-12-09 01:26 AM
Satellite forums targeted by DDoS attacks	Satellite News	Satellite News	0	04-04-09 07:40 PM
ddos attack	eddybailey	Eurovox	4	08-02-09 10:40 AM
Virgin email suffers from spam attack	Internet News	Internet	0	13-10-08 01:10 PM
Police foil UK net attack	BGonaSTICK	PC Hardware	0	13-03-07 01:34 PM