Article

2025-08-28 --Tech & Moderator Notes

Rantburg.com was hammered by a multitude of servers, which slowed the server down to a crawl, last Monday and Tuesday.

I call it a distributed denial of service attack, in that there were a number of servers listed in the scan hitting the ethernet port hard with data totaling at one point - cumulatively - 50 gigabytes in about 20 minutes. May not seem like much, but when its in 4,000 byte packets hitting the port at one per second, it's a problem.

As may or may not have indicated before, the great bulk of the servers hammering rantburg.com were in Latin America, which led me to believe it was the inevitable reaction of bad actors to Trump's "Gunboat Diplomacy."

Dunno.

Deliberately analyzing the IPs hitting the server, about two thirds of them were not coming from a live host, i.e. they were spoofed IPs.

The attacks were finally mitigated when one of the command servers directing the attacks was blocked, along with about 1,500 other servers. All blocked netblocks contained Unix/Linux web servers: A shot in the dark, as it were.

A little bit older and a little wiser, we have a much better idea of what to look for going forward and how to defend against such attacks.

The Bad Guys will return, there can be no doubt.

Posted by badanov 2025-08-28 00:00|| || Front Page|| ||Comments [144 views ] Top

#1 They just want to speak to you about your car's warranty.

Posted by ed in texas 2025-08-28 08:03|| 2025-08-28 08:03|| Front Page || Comments Top

#2 Everyone on the internet has Cloudflare now.
Dos protection.
An old-fashioned metal server? Just get a virtual instance from...anywhere.

Posted by Jairong+Scourge+of+the+Gepids2435 2025-08-28 09:10|| 2025-08-28 09:10|| Front Page || Comments Top

12:40 Lord Garth
12:39 Grom the Affective
12:36 Grom the Affective
12:34 Grom the Affective
12:27 Abu Uluque
12:27 trailing wife
12:19 Airandee
12:19 Airandee
12:16 trailing wife
12:13 swksvolFF
12:12 Abu Uluque
12:08 Old Patriot
12:07 swksvolFF
12:05 Rambler
12:00 trailing wife
11:54 Skidmark
11:51 Mercutio
11:33 swksvolFF
11:31 Grom the Affective
11:27 Abu Uluque
11:24 Grom the Affective
11:08 Procopius2k
10:49 Besoeker
10:44 DarthVader