Computer Hope

Other => Other => Topic started by: Computer Hope Admin on October 15, 2010, 06:16:50 PM

Title: Friday fun
Post by: Computer Hope Admin on October 15, 2010, 06:16:50 PM
Just a FYI, I'm aware of the server issues and slowdowns currently being encountered. I've been looking into the issues. Sorry for the inconvenience.
Title: Re: Friday fun
Post by: rthompson80819 on October 15, 2010, 06:24:46 PM
No problem.  Although it would be interesting to know what the problems were.
Title: Re: Friday fun
Post by: patio on October 15, 2010, 08:21:20 PM
I'm so ticked off i'll probably never talk to you again...
Title: Re: Friday fun
Post by: Computer Hope Admin on October 15, 2010, 08:39:28 PM
Well once again ended up being a DDoS attack on port 80 from ip 86.9.89.104. Have had it blocked and reported.
Title: Re: Friday fun
Post by: patio on October 15, 2010, 09:06:41 PM
Just wondering who that may have been...
Title: Re: Friday fun
Post by: Helpmeh on October 15, 2010, 10:02:19 PM
Just wondering who that may have been...
I'm wondering if that's sarcasm or not, because I personally have no idea.

@Nathan
Wouldn't it just be DoS, not DDoS, if it only came from one IP? I thought the extra D meant distributed, as in a whole group of people were doing it.
Title: Re: Friday fun
Post by: rthompson80819 on October 15, 2010, 10:25:47 PM
Just wondering who that may have been...

A couple of names come to mind, but I'm not sure they are smart enough to pull a DOS attack off.
Title: Re: Friday fun
Post by: Computer Hope Admin on October 15, 2010, 11:16:19 PM
@Nathan
Wouldn't it just be DoS, not DDoS, if it only came from one IP? I thought the extra D meant distributed, as in a whole group of people were doing it.

You're absolutely correct. From what I could tell it was just one IP so off that logic it would be a DoS attack. Although seems like the server getting overloaded as it was that it was a bigger attack, but that single IP seemed to be the primary culprit.
Title: Re: Friday fun
Post by: quaxo on October 17, 2010, 12:11:32 AM
Southeastern UK it seems. From an area south/southeast of London.
Title: Re: Friday fun
Post by: Salmon Trout on October 17, 2010, 02:09:09 AM
Southeastern UK it seems. From an area south/southeast of London.

Tracert suggests that's a customer of the same cable and DSL company that I am with. The terms of service explicitly forbid that type of misuse. Of course they could have been infected and recruited into a botnet, couldn't they?



Title: Re: Friday fun
Post by: quaxo on October 17, 2010, 03:00:48 AM
Tracert suggests that's a customer of the same cable and DSL company that I am with. The terms of service explicitly forbid that type of misuse. Of course they could have been infected and recruited into a botnet, couldn't they?

Yeah, I suppose, but that usually results in a distributed attack, doesn't it? This was just from 1 IP as CH and Helpmeh pointed out.
Title: Re: Friday fun
Post by: Salmon Trout on October 17, 2010, 03:29:09 AM
Yeah, I suppose, but that usually results in a distributed attack, doesn't it? This was just from 1 IP as CH and Helpmeh pointed out.

A botnet of one; that is, a single (infected?) computer remotely controlled by somebody else...

I suppose it couldn't have been somebody practising with the ping command and unintentionally causing a flood? But I am confused. There are 3 VirginMedia fibre packages: down/up bandwidths in megabits are 10/1, 20/2 or 50/5. The last of these is quite expensive - 38 UK pounds (60 US dollars) a month. Also these upload speeds are 300% approx increases and have only just (30 Sep 2010) been announced; they are being rolled out across the network over the next few weeks. Many users are still on the old upload speeds. So (pardon my ignorance) how does one little guy in England at the end of a domestic cable connection overwhelm a server thousands of miles away? I thought that that the bandwidth of one domestic user would be so small, compared to the server where CH is hosted, that a single-IP DOS attack would be ruled out, but evidently I am missing something?


Title: Re: Friday fun
Post by: quaxo on October 17, 2010, 05:56:00 AM
A botnet of one

Technically, wouldn't that just be a bot and not a botnet?  ;D
Title: Re: Friday fun
Post by: Salmon Trout on October 17, 2010, 07:06:23 AM
Technically, wouldn't that just be a bot and not a botnet?  ;D

Yes indeed; but still I am curious how it could seriously disrupt a web server 4000 miles away?
Title: Re: Friday fun
Post by: Helpmeh on October 17, 2010, 07:34:00 PM
Yeah...very good point Salmon...

Nathan, are you cheaping out on us?
Title: Re: Friday fun
Post by: quaxo on October 18, 2010, 02:51:40 AM
Nate was recently discussing an upgrade to the power supply for the server.

(http://img.photobucket.com/albums/v496/xel123/gerbilpower.jpg)
Title: Re: Friday fun
Post by: Helpmeh on October 19, 2010, 03:45:27 PM
I think he's upgrading to rabbit. I hear their output v. food intake is much better than the common hampster.
Title: Re: Friday fun
Post by: quaxo on October 19, 2010, 10:29:24 PM
Interesting. I didn't know they made wheels large enough for rabbits.