DH under DOS attack

Zardon · Dec 7, 2002, 08:58 AM

as Shaith posted front page guys, over the last few days, Driverheaven has seen tremendous traffic, due to omegadrives new set, and the ati set, the server has dealt with close to 1.5 million hits, 50+ gig of downloads.

We found out several hours ago the server was attacked from two seperate IP addresses with almost 300,000 requests in total, the authorities have been informed with logs of the attacks.

My question is, who the hell does this? is it boredom? a personal vendetta or just some evil kids out for a kick?

As if the server hadnt enough to deal with.............

kinetic · Dec 7, 2002, 09:16 AM

They should be birched!

Kelsenellenelvian · Dec 7, 2002, 09:17 AM

Stupid b!tches

Vampyromaniac · Dec 7, 2002, 10:50 AM

Such anuses . . .

Speaking of which, I say we pry theirs' apart with some Jaws-Of-Life 'till 'ey tear in two!

applicator · Dec 7, 2002, 11:15 AM

Chances are these guys probably aren't kids.

Personally I would grab them by their short hairs....bend them down...turn them around...take my foot, and shove it up their ass.

Now they might like it, but I would like it more. I wouldn't stop until I was done.

This is crap. Smack these guys Zardon...I know you can.

***craig5320*** · Dec 7, 2002, 01:44 PM

It must play havoc with ther pRon downloads all those hits,

I think we'll always have lamers.

TEmp69 · Dec 7, 2002, 04:25 PM

I dont know if you can talk from a DoS attack when 2 sepperated IPs are causing this traffic!!

Matth · Dec 7, 2002, 04:49 PM

DoS, not DDoS

A DoS attack is executed by one (or more) large assholes using their own (or stolen) capacity.

A 128 k broadband user could DoS a dialup user easily - and so on up the scale.

A DDoS (distributed denial of service) is executed by a "master" commanding tens, hundreds (thousands?) of trojan-compromised slaves.

And the new style of attack (with REFLECTION) discovered at GRC, uses **uncompromised** innocent servers as middlemen, to reflect return packets back at the target in a forged source address.

One of the Twelve · Dec 10, 2002, 06:38 AM

JCLW · Dec 10, 2002, 08:14 PM

Out of curiosity, what kind of hardware is the server made up of?

- JW

Shaith · Dec 10, 2002, 09:42 PM

The attacks, from what I've established, were coming from large scale networks. Measures are being taken and things are being implemented to eliminate the threat.

Mac Daddy · Dec 11, 2002, 02:33 AM

Quote:

Originally posted by Shaith
The attacks, from what I've established, were coming from large scale networks. Measures are being taken and things are being implemented to eliminate the threat.

Thats, great. let me know how I can help.
I can break arms and legs quite efficiently, Aikido does have some strong points, wont help you guys out with this though.

I havent been on in a while, cant beleive some dickless C^^ksucker would do this to DH.

I had trouble logging on, sent nasty Email to Zardon(SORRY BUD, Merry XMAS

) wasnt his fault, thought my membership had been revoked or something.

I couldn't even view my profile, maybe I should dedicate some more time again, this shit is getting weird

Cheers Shaith, hope ya get this solved, And a Merry Xmas to you and UberLord, as well as Louie6666 and Sintax.

Keep me posted,

Kelsenellenelvian · Dec 11, 2002, 03:03 AM

Damn it Gates must be getting jealous.

Mac Daddy · Dec 11, 2002, 03:28 AM

Quote:

Originally posted by Kelsenellenelvian
Damn it Gates must be getting jealous.

Might be, but remember I pronounce that "MR BURNS"

Kelsenellenelvian · Dec 11, 2002, 03:41 AM

Ohhyeay sorry "Mr. Burns problably has a bugs up his ass!!!

Louie6666 · Dec 12, 2002, 08:56 AM

Quote:

Originally posted by Mac Daddy
Might be, but remember I pronounce that "MR BURNS"

Glad see you about Mac Daddy

I had a DOS attack this week, 2 ips 3pm tueday(thats when i noticed) I've taken my network down for rebuild, which is conspirying against me arrrh..had to register new mac address with isp (took 24hours doh)...main rig had bad bios flash another 2 hours to sort....firewall oh yeah spread across the floor behind me lol, & my ip has gone super dynamic..not good 4 servers (perhaps isp got pissed at Dos) dos was also affecting my neighbours, one of which was friend who was trying to get asherons call 2 working..which would crash out due to network timeout...dam technnology it work fine for months then everything goes tits up at once...I'll stop there of my winge list it goes on this week

oh & I've got job interview, for IT & Software Testing engineer in an hour.... arrrh

Mac Daddy · Dec 13, 2002, 12:36 AM

Quote:

Originally posted by Kelsenellenelvian
Ohhyeay sorry "Mr. Burns problably has a bugs up his ass!!!

Or maybe Bin Laden got himself a high speed connection
I dont care for this 2 thing

Reminds me too much of 911

Lets all be very aware, and very cautious with our servers

All the best to you and yours as well Kelsenellenelvian

And lets keep our eyes open, for these assholes who have nothing better too do than screw up someone elses HARD WORK

Like DH, Zardon has worked very hard to keep this site clean, and productive, and I have backed him up, with no request from him. One hand washes the other, my Puter runs clean.

No one F#@ks with DH, thats my decsion

That includes material and comments, which may put ownership in peril, its all in the rules, no cracks, no keys, there are other places you can find that.

Not here, Valid links, and honest advice.
Betas, well, there Beta's

It seems Louie6666, has had a similar attack, my next post will be too him of course

Keep the Faith

Mac Daddy · Dec 13, 2002, 12:46 AM

Quote:

Originally posted by Louie6666
Glad see you about Mac Daddy

I had a DOS attack this week, 2 ips 3pm tueday(thats when i noticed)

oh & I've got job interview, for IT & Software Testing engineer in an hour.... arrrh

Cheers mate, nice to hear from you as well Louie, Louie

kinda strange it was 2 ips as well, somebodys up to something,
Hope ya nail that job, GOD knows your more than qualified.

Make sure ya slam back a couple of pints for me during this holiday season, I'll definately return the favor.

Take care bud

Louie6666 · Dec 13, 2002, 01:29 AM

Quote:

Originally posted by Mac Daddy
Cheers mate, nice to hear from you as well Louie, Louie

kinda strange it was 2 ips as well, somebodys up to something,
Hope ya nail that job, GOD knows your more than qualified.

Make sure ya slam back a couple of pints for me during this holiday season, I'll definately return the favor.

Take care bud

Spent 45mins trying to convince a panel that I wouldn't be bored testing there embedded software..."Your a Bit Bright to be doing this Job" there words not mine..lol was trying to avoid mentioning that I derive great pleasure from crashing & bashing betas..The job really has me written all over it 80% software testing 20% network admin...fingers crossed hopefully find out tommorrow(latest monday)

...Funny went to for interview for AOL(only front line support) and was told didn't have enough technical knowledge, had to explain to the recruiter, why I was laughing so much, whilst pointing at my CV coughing & spluttering, they obviously didn't even read it

Just put up new firewall, haven't put webserver back up yet, debating whether to put .Net Server back up, which I like & is easy to use..or try another linux distro, which terrifies the hell out of me, which is really strange considering I don't mind using it for desktop & quite happy to modify scripts for it!

The Dos attack! I didn't really take to much notice kinda looked at logs, thought oh well! nobody can see server, so took down network for rebuild(biggest hits were around 3pm GMT tuesday which actually knocked me offline) I had to renew my ip which had been static for over a year..doh!
I really feel for the person that has my old ip & hope they have protection, been tempted to scan my old ip but resisted so far

I'll Have a Beer for you Mac Daddy, have a large One M8

Mac Daddy · Dec 13, 2002, 02:33 AM

Quote:

Originally posted by Louie6666
Spent 45mins trying to convince a panel that I wouldn't be bored testing there embedded software..."Your a Bit Bright to be doing this Job" there words not mine..lol was trying to avoid mentioning that I derive great pleasure from crashing & bashing betas..The job really has me written all over it 80% software testing 20% network admin...fingers crossed hopefully find out tommorrow(latest monday)

heh, It sounded like it
And there right, you are to bright for this job, but they dont have to know that, LOL

On AOL, Thats funny man, I fell of my chair when I read that, what a bunch of dorks

Best of luck Louie, Louie

On servers, Im glad I dont have your last IP

We just entered the "Canadian Songwriters Competion"
sponsered by 8 stations, if its aired, thought it would be, ill send you info, Im sure you can tune in any radio station you want, and you can have a listen, Rain, is the song, Dont FRET is our kind of radio name, I know pretty sucky, BUT hey, if it gets some airplay, WHO CARES

I'll Have a Beer for you Mac Daddy, have a large One M8

And i'll have a larger one for you my friend, a frankenpint

reno · Dec 15, 2002, 01:35 AM

Isn't there some way you could program the server to block IPs doing multiple simultaneous requests?

Louie6666 · Dec 15, 2002, 06:51 AM

Quote:

Originally posted by reno
Isn't there some way you could program the server to block IPs doing multiple simultaneous requests?

even when you ban ips dosen't stop the packets arriving at your ports...when theres enough packets that are not legit, it becomes difficult & slow for legit packets to get threw to the server.

if your lucky your isp may filter the packets up stream for you, but best way is get sources of packet storm closed down, a lot of people don't know there equipment has been hijacked & have been taking part in attacks...so you have to get in touch with there isp to resolve it

Dec 7, 2002, 08:58 AM	#1
Zardon DriverHeaven Founder Join Date: May 2002 Posts: 32,480 Rep Power: 179	DH under DOS attack as Shaith posted front page guys, over the last few days, Driverheaven has seen tremendous traffic, due to omegadrives new set, and the ati set, the server has dealt with close to 1.5 million hits, 50+ gig of downloads. We found out several hours ago the server was attacked from two seperate IP addresses with almost 300,000 requests in total, the authorities have been informed with logs of the attacks. My question is, who the hell does this? is it boredom? a personal vendetta or just some evil kids out for a kick? As if the server hadnt enough to deal with.............

Dec 7, 2002, 09:17 AM	#3
Kelsenellenelvian Master of my own Destiny Join Date: Aug 2002 Location: EverDawn Kingdom,TruEarth Posts: 1,394 Rep Power: 0	Stupid b!tches __________________ [color=#0000ff] Download Windows Post-Install Wizard v4.3.8 and WPI Lite v1.2 Here [/color][color=red][color=blue][/color][/color]

Dec 7, 2002, 10:50 AM	#4
Vampyromaniac confutatis maledictis Join Date: May 2002 Location: somewhere dark Posts: 5,974 Rep Power: 77 System Specs	Such anuses . . . Speaking of which, I say we pry theirs' apart with some Jaws-Of-Life 'till 'ey tear in two! __________________ *Digitalis 3.3* Athlon 64 3000 // ASUS K8V SE Deluxe // 1024MB PC3200 (2-2-2-10 1T) ATI All-In-Wonder 9700 Pro // 20" Dell 2005FPW (DVI) M-Audio Revo 7.1 + Philips Acoustic Edge // Klipsch ProMedia 2.1 320/16 Western Digital WD3200KS + 120/8 Seagate 7200.7 NEC ND-3550A 16x DVD±RW + Lite-On 52x24x CD-RW Antec Sonata case // 480W Antec TruePower personal bests \|\| Aq'3: 46796 \| 3D'01: 20461 \| 3D'03: 6336 \| 3D'05: 2677 \| PC'04: 4605 \| PC'02: 7691,9092,1250

Dec 7, 2002, 01:44 PM	#6
*craig5320* HH Administrator Join Date: May 2002 Location: Manchester, UK Posts: 8,576 Rep Power: 445 System Specs	It must play havoc with ther pRon downloads all those hits, I think we'll always have lamers. __________________ HardwareHeaven on Facebook

Dec 7, 2002, 04:25 PM	#7
TEmp69 DriverHeaven Junior Member Join Date: Dec 2002 Location: .at Posts: 38 Rep Power: 0	hmmm I dont know if you can talk from a DoS attack when 2 sepperated IPs are causing this traffic!!

Dec 7, 2002, 09:16 AM	#2
kinetic DriverHeaven Senior Member Join Date: May 2002 Location: Manchester England Posts: 2,559 Rep Power: 0	They should be birched!

Dec 7, 2002, 11:15 AM	#5
applicator DriverHeaven Junior Member Join Date: May 2002 Location: calgary Posts: 42 Rep Power: 0	Chances are these guys probably aren't kids. Personally I would grab them by their short hairs....bend them down...turn them around...take my foot, and shove it up their ass. Now they might like it, but I would like it more. I wouldn't stop until I was done. This is crap. Smack these guys Zardon...I know you can.

Dec 7, 2002, 04:49 PM	#8
Matth Flash Banner Hater Join Date: Jun 2002 Location: UK Posts: 3,426 Rep Power: 93 System Specs	DoS, not DDoS A DoS attack is executed by one (or more) large assholes using their own (or stolen) capacity. A 128 k broadband user could DoS a dialup user easily - and so on up the scale. A DDoS (distributed denial of service) is executed by a "master" commanding tens, hundreds (thousands?) of trojan-compromised slaves. And the new style of attack (with REFLECTION) discovered at GRC, uses uncompromised innocent servers as middlemen, to reflect return packets back at the target in a forged source address.

Dec 10, 2002, 06:38 AM	#9
One of the Twelve DriverHeaven Lover Join Date: Jul 2002 Location: The Kold North Posts: 131 Rep Power: 0	__________________

Dec 10, 2002, 08:14 PM	#10
JCLW Long Live The P6! Join Date: Nov 2002 Location: The Great White North Posts: 119 Rep Power: 0	Out of curiosity, what kind of hardware is the server made up of? - JW

Dec 10, 2002, 09:42 PM	#11
Shaith HardwareHeaven Senior Member Join Date: May 2002 Posts: 916 Rep Power: 0	The attacks, from what I've established, were coming from large scale networks. Measures are being taken and things are being implemented to eliminate the threat.

Dec 11, 2002, 03:03 AM	#13
Kelsenellenelvian Master of my own Destiny Join Date: Aug 2002 Location: EverDawn Kingdom,TruEarth Posts: 1,394 Rep Power: 0	Damn it Gates must be getting jealous. __________________ [color=#0000ff] Download Windows Post-Install Wizard v4.3.8 and WPI Lite v1.2 Here [/color][color=red][color=blue][/color][/color]

Dec 11, 2002, 03:41 AM	#15
Kelsenellenelvian Master of my own Destiny Join Date: Aug 2002 Location: EverDawn Kingdom,TruEarth Posts: 1,394 Rep Power: 0	Ohhyeay sorry "Mr. Burns problably has a bugs up his ass!!! __________________ [color=#0000ff] Download Windows Post-Install Wizard v4.3.8 and WPI Lite v1.2 Here [/color][color=red][color=blue][/color][/color]

Dec 15, 2002, 01:35 AM	#21
reno Painlord of Ichor Join Date: May 2002 Location: bloinkin! Posts: 1,610 Rep Power: 0	dsf Isn't there some way you could program the server to block IPs doing multiple simultaneous requests?