Earlier quoted context omitted.
what.cd was one I noticed this morning.
what.cd doesn't use CloudFlare, but yeah they've been under attack
Global Network Attacks Were Up Over 98% this morning
21–30 of 33 posts
Re: Global Network Attacks Were Up Over 98% this morning
#22Earlier quoted context omitted.
what.cd was one I noticed this morning.
what.cd doesn't use CloudFlare, but yeah they've been under attack
[liliff@ichigo ~]$ dig ns what.cd +short
walt.ns.cloudflare.com.
leah.ns.cloudflare.com.
Re: Global Network Attacks Were Up Over 98% this morning
#23Software on my deciated server already blocked attacks from IP's belonging to: - China - Mongolia - Netherlands - Turkey - Iran - Moldova - Romania - Kazakhstan - France - Taiwan - UK Pretty diversified attack in progress.
What software are you using ? was it a large scale attack ?
I love it as it blocks any crap that tries to hack in automatically at iptables level.
Judging by logs I see about 2x-3x more break-in attempts to misc system services.
Re: Global Network Attacks Were Up Over 98% this morning
#24Is it typical that Texas would be such a large percentage of global attacks? It's at 24.83% at the moment.
Re: Global Network Attacks Were Up Over 98% this morning
#25Earlier quoted context omitted.
Are you using something like fail2ban? I'm seeing slightly higher activities on all my servers, but I doubt it's actually statistically significant (i.e. not different from random)
A glance at the logs and it looks like our dedicated servers are fail2banning IPs at pretty much the normal background level—i.e. a fairly steady stream of mostly Chinese addresses all day long.
I'm not a security researcher, but fail2ban appears to be a log prettifier instead of an actual security apparatus, as it doesn't actually prevent anyone from logging into your box. Unless you've configured fail2ban to ban IPs after 1 failed attempt, if you don't have a secure password or any other such basic security measures, you are still at risk of getting pwned.
Instead of taking the time with fail2ban, I personally just make sure everyone uses passphrased ssh keys, or use a strong password in conjunction with a yubikey or 2 factor authentication and call it a day.
Re: Global Network Attacks Were Up Over 98% this morning
#26Re: Global Network Attacks Were Up Over 98% this morning
#27Software on my deciated server already blocked attacks from IP's belonging to: - China - Mongolia - Netherlands - Turkey - Iran - Moldova - Romania - Kazakhstan - France - Taiwan - UK Pretty diversified attack in progress.
Re: Global Network Attacks Were Up Over 98% this morning
#28Is it typical that Texas would be such a large percentage of global attacks? It's at 24.83% at the moment.
Maybe the War On Christmas, Religious Bigotry, Racism, Homophobia and Misogyny, Gun Fanatics, Big Oil Companies, Global Warming Denial and Government Deregulation got started a little late.
That said, they do hold disturbing power over certain things, such as education.
But still not as bad as Mississippi. Now that is a truly awful state. The absolute worst in nearly all demographics besides violent crime (where it is second, likely due to having the highest incarceration rate). Also the most religious.
Re: Global Network Attacks Were Up Over 98% this morning
#29Earlier quoted context omitted.
what.cd was one I noticed this morning.
I heard from a friend that what.cd and similar torrent sites like that have been under heavy ddos attacks for a while now.
there seems to be a trend where media torrent sites are targeted and i'm wondering how it's been able to go on for so long.
Re: Global Network Attacks Were Up Over 98% this morning
#30Oops, all I get at that site on my iPad is a message ordering me to install Flash. Hello, Akmai? Anyone noticed the declining support for that old technology ?