Go Back   vb.org Archive > Community Central > Community Lounge
Reload this Page Anyone see this type of DDoS?
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 03-13-2006, 01:39 PM
Robbed Robbed is offline
 
Join Date: Oct 2005
Posts: 329
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Anyone see this type of DDoS?
Every minute it would send 50 guest connections to a thread and refresh, it was at 1600 guest and it was causing a slow down.

We remove the tread but the guest connections till come back. The only way so far was to rename the forums.

If we go back it starts over again.

Any ideas?
Reply With Quote
  #2  
Old 03-13-2006, 02:08 PM
netwind netwind is offline
 
Join Date: Feb 2005
Posts: 55
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
check Referer in http log first, maybe this is "slashdot effect" ?
Reply With Quote
  #3  
Old 03-13-2006, 02:33 PM
Robbed Robbed is offline
 
Join Date: Oct 2005
Posts: 329
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
I will take a look, but VB said most likely a DDoS.

I would think there would be a increase in signups if they really wanted to see that thread since guest can't view it now.
Reply With Quote
  #4  
Old 03-14-2006, 06:32 PM
tehste tehste is offline
 
Join Date: Feb 2004
Posts: 221
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
it might have been like: look how lame this thread is.. Then it stops working for people so they re still unlikely to signup! Why would you have a ddos on a specific thread?
Reply With Quote
  #5  
Old 03-14-2006, 09:10 PM
Robbed Robbed is offline
 
Join Date: Oct 2005
Posts: 329
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
That's what happened, 1600 guest connected to that thread and the number kept climbing until the forum was renamed.

It was causing the whole forum to lag. Every ip was different and came from all over. Financial companies, Lexmark, Korean Army etc...

When it was renamed back it started up again. Hosting was contacted and it seems to be ok now.
Attached Images
File Type: jpg wtf4.jpg (39.6 KB, 0 views)
Reply With Quote
  #6  
Old 03-14-2006, 09:49 PM
Corriewf's Avatar
Corriewf Corriewf is offline
 
Join Date: Dec 2004
Location: parse error
Posts: 799
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
There's a giant german rabbit?
Reply With Quote
  #7  
Old 03-14-2006, 09:55 PM
Robbed Robbed is offline
 
Join Date: Oct 2005
Posts: 329
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
It was a popular search on yahoo and our thread was listed. We think that's where someone found it and decided to mess around.

Reply With Quote
  #8  
Old 03-14-2006, 10:01 PM
tnguy3n's Avatar
tnguy3n tnguy3n is offline
 
Join Date: May 2003
Location: U of I, Iowa
Posts: 846
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Coming from different IPs sounds like DDoS to me. I'm glad I'm running home server. My router would block those DDoS attacks before it gets to my site.
Reply With Quote
  #9  
Old 03-14-2006, 10:49 PM
Corriewf's Avatar
Corriewf Corriewf is offline
 
Join Date: Dec 2004
Location: parse error
Posts: 799
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Quote:
Originally Posted by Robbed
It was a popular search on yahoo and our thread was listed. We think that's where someone found it and decided to mess around.

JESUS! THATS ONE HELL OF A RABBIT!

I wonder if it was some bot. I mean if it was someone ddosing you, wouldn't they figure out you moved it?
Reply With Quote
  #10  
Old 03-14-2006, 11:39 PM
tehste tehste is offline
 
Join Date: Feb 2004
Posts: 221
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
its so obviously photoshopped!
Reply With Quote
Reply

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT. The time now is 12:01 PM.

Contact Us - Archive - Top

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04307 seconds
  • Memory Usage 2,258KB
  • Queries Executed 14 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (1)postbit_attachment
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 
Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • postbit_attachment
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete