DoS fun

***xHalt*** · February 19th, 2010

If you experienced slower page loads for the last 2 hours, I'd like to inform you that a little kid was having some fun trying to DoS this site. Even though the effect was as little as they come by, his mother should be proud he was the first to ever have an effect on this site.
Keeps me on the edge of my seat... though next time, do bring a bigger challenge.

**Untouch** · February 19th, 2010

lol what did he actually do??
What a gay little s**t trying to hack the site

***xHalt*** · February 19th, 2010

Originally Posted by Untouch

lol what did he actually do??
What a gay little s**t trying to hack the site

A DoS is not actually hacking, as he didn't try to break into the server to alter files or extract information. He was just using a script that sends a lot (in some cases, only a few, slow ones might suffice, but in general...) of bogus requests to the server in order to hog up its resources. A successful DoS hence makes the server unavailable for anyone else, as there are no more resources available. This was never the case, though it managed to cause a temporary itch on my baby.

Note: It's far from the first time an attack was tried.

**mOwl** · February 19th, 2010

Scriptkiddy's. When will they dissappear. *sigh*

***xHalt*** · February 19th, 2010

Gotta give him one thing though, he IS persistent...
Banned yet another lot of ips.

**Waller187** · February 19th, 2010

Maybe he DL a virus or something and is raging xD

A min ago i couldent get on the site at all :S

If he got a static IP give it me ill teach him a lesson >.<

**quandary** · February 19th, 2010

I use this to avoid those problems:
apt-get install libapache-mod-dosevasive

Code:

$HOST["url"] =~"^/(index.php)?(\?.*)?$" {
    evasive.max-conns-per-ip = 4
}

Code:

#######################################################
###  CaMeL  lighttpd.conf  BEGIN
#######################################################
#
#### modules to load
server.modules           = ( "mod_expire",
			     "mod_auth",
                             "mod_access",
                             "mod_evasive",
                             "mod_compress",
                             "mod_status",
                             "mod_redirect",
                             "mod_accesslog" )

#### performance options (aggressive timeouts)
server.max-keep-alive-requests = 5
server.max-keep-alive-idle = 15
server.max-read-idle     = 15
server.max-write-idle    = 15

## number of child worker processes to spawn (0 for lightly loaded sites)
# server.max-worker      = 300

It's a pitty it's not legal to offer you a little part of a botnet for revenche, Tom ;-)))

***xHalt*** · February 20th, 2010

Originally Posted by quandary

I use this to avoid those problems:
apt-get install libapache-mod-dosevasive

Appreciate the help & indeed, that package come in quite useful with the older server where we used lighttpd, not running on lighty anymore though

Either way, got quite an elegant solution in place: perl script to check last part of the access.log & ban the ips creating the specified requests. Has been working since...

Originally Posted by quandary

It's a pitty it's not legal to offer you a little part of a botnet for revenche, Tom ;-)))

Well, I'm not one to believe in revenge either way. Script kiddies get bored easy enough & lack the knowledge to try to DoS in another way.

**BlacKnighT** · February 20th, 2010

nha he didnt made DoS , he made DDos cuz Vbulletin needs allot of bots to be taken down

**fANAT1C** · February 22nd, 2010

Originally Posted by xHalt

A DoS is not actually hacking, as he didn't try to break into the server to alter files or extract information. He was just using a script that sends a lot (in some cases, only a few, slow ones might suffice, but in general...) of bogus requests to the server in order to hog up its resources. A successful DoS hence makes the server unavailable for anyone else, as there are no more resources available. This was never the case, though it managed to cause a temporary itch on my baby.

Note: It's far from the first time an attack was tried.

I couldn't get on for 2 days.

Thread: DoS fun

Share This Thread!

Share on Facebook

Share This Thread!

LinkBack

Thread Tools

Display

DoS fun

Re: DoS fun

Re: DoS fun

The Following User Says Thank You to xHalt For This Useful Post:

Re: DoS fun

Re: DoS fun

The Following 2 Users Say Thank You to xHalt For This Useful Post:

Re: DoS fun

Re: DoS fun

Re: DoS fun

Re: DoS fun

Re: DoS fun

Bookmarks

Bookmarks

Posting Permissions