1,  2 ->
^^
vv
List results:
Search options:
Use \ before commas in usernames
nate
2006-04-11 03:38:37 pm
between around 9:00 am CDT and 2:30 pm CDT today tph server (which also hosts m2k2 and sda) was subject to a denial of service attack originating from a single ip address. the .avi versions of sesshoumaru's 1% technical demo were requested several times a second, using all of the http server's resources and preventing any other resources from being served during that time. i have redirected access away from those resources for requests coming from that ip, and service has now returned to normal.

so, any ideas on who i pissed off?
Thread title: 
Yoshi348
2006-04-11 04:00:42 pm
PAGE BREAKER
Ready and willing.
Who you've pissed off LATELY I have no clue. If you were going to get DoS'd, now is a pretty random time to do it.
MonsterERB
2006-04-11 05:22:00 pm
Well, this explains why I couldn't get on m2k2 this morning. Rolling Eyes
...
I assume you've already checked this IP versus all known m2k2 IP addresses... it would probably be improper of you to do so, but if you PM me the offending IP address I can check it versus SCU's IP addresses.  I highly doubt that anyone at SCU would be responsible, though.  We do have a few members who have the knowledge to do such a thing, but they also happen to be excellent members in good standing and highly trusted.
...
Failing that, I would guess (from my experience at SCU) that attempted hackings/DOS attacks are usually random - in other words, it's not the "disgruntled former member" or "jilted ex-girlfriend" doing it, but just a generic hacker who unfortunately targeted your site.
...
Now, if it is a non-random attack, there are any number of possibilities - someone who was banned from the forum.  Someone who hates m2k2 or SDA for some reason.  Someone who detests Metroid or speedrunning in general.  Someone who has nothing against the site, but something against nate personally.  And so on.  This is where the paranoia sets in... but as I said, it's quite likely just a bit of bad luck and not a targeted attack.
doninss
2006-04-11 06:53:30 pm
I seem to remember the wiki being first hit by false posts, and later by spambots. Probably unrelated.
arkarian
2006-04-11 07:13:47 pm
red chamber dream
It's Ekarderif. Everyone knows how much he hates nate.
Random Zelda Person
2006-04-11 07:57:39 pm
Dude, it is obviously Sesshoumaru.  Why else would he have gone after that video?
nate
2006-04-11 08:10:42 pm
lol. that makes no sense, but is still funny somehow.
DJGrenola
2006-04-11 09:20:54 pm
ahh, so that's what it was. I did suspect DoS, but was limited in how much investigation I could do owing to the fact that I'm running around packing boxes nonstop right now.

I'd like to be all cyberpunk about it and suggest that the Russian mafia were responsible, but given the number of compromised boxes they have at their disposal, I think the server would have been reduced to a heap of smoking metal had it been them.

It's not a very elegant way to DoS a server, mind. It's always possible it could have been some braindamaged download manager or something.
nate
2006-04-11 09:24:35 pm
yeah, malicious intent is by no means certain, but likely. i'll catch you online sometime and let you know what i know. in the meantime, good luck with your contingent-internal relocation operation.
Banjonator
2006-04-12 03:10:32 am
I noticed the problem yesterday about 4:00 pm GMT+0100 (Vienna, Berlin, Paris,...).
I could not access m2k2 or the forum. Maybe this time will help you.

@nate: Maybe it was your psycho co-admin again (from your m2k2 story)?!?!  :x
SABERinBLUE
2006-04-12 03:21:04 am
Cook of the Sea
Well you have to remember, last time marie killed the server, which required months of cleanup work.  This was a DoS that lasted for several hours.  It'd be like putting a guy in the hospital for three months and then years later, kicking him in the shins as you pass him on the street.
Yoshi348
2006-04-12 07:56:48 pm
PAGE BREAKER
Ready and willing.
marie no longer has that kind of power, though. When marie had root access deleting everything is as easy as... *counts on fingers*... 9 keystrokes. Now, it's... well, not.
SABERinBLUE
2006-04-12 07:59:40 pm
Cook of the Sea
Well I mean, having the root password is only one way to get shit done, albeit a completely freaking awesome way.
nate
2006-04-13 12:21:46 pm
happened again just a few minutes ago from a different ip. this time i used a different kind of ban that will hopefully stop it for good. i think i caught it this time right as it was starting, so you may not have noticed any major interruption of service.
MonsterERB
2006-04-13 12:33:26 pm
I actually did notice this.  m2k2 and SDA were both down for about 10-20 minutes.  Good job catching it quickly.
...
Was the IP similar, or completely different?  The chance of this being a "random" attack seems pretty small, now that it's happened twice so quickly.
nate
2006-04-13 12:35:36 pm
yeah, it's not random.
Purple Lizard
2006-04-13 12:44:53 pm
I noticed it go down myself.  It's cool you caught it so quickly.  Was it more or less the same method of attack (Sess's vids)?
Andrew Mills
2006-04-13 04:31:29 pm
Strategy Guide Writer
Friggin idiots  :x I'd be going mad if someone DOS attacked SCU's server. At least you have the tech knowhow to stop it, I'd have to rely on my hosts to do it for me...  Embarassed
StarmanHaxor
2006-04-13 06:10:37 pm
No matter what my name says I can completely assure you that it was not me!

*runz*
arkarian
2006-04-13 11:14:30 pm
red chamber dream
Quote from StarmanHaxor:
No matter what my name says I can completely assure you that it was not me!

lol. Don't worry: there's no way in hell that anyone would ever think it was you.
Banjonator
2006-04-14 02:56:22 am
Quote from MonsterERB:
I actually did notice this.  m2k2 and SDA were both down for about 10-20 minutes.  Good job catching it quickly.
...
Was the IP similar, or completely different?  The chance of this being a "random" attack seems pretty small, now that it's happened twice so quickly.


me too. Just for about 15 minutes as monster said.
silent (((((echo)))))
2006-04-14 05:43:02 am
I noticed it too, it lasted about 20 minutes.
Ekarderif
2006-04-14 11:32:00 am
You know, I didn't take any initiative with hurting M2k2 when I stormed off. So I randomly decide to do so in the middle of April?

Please. Unlike some people, I actually separate personal and professional issues.