Chinese Activists under DDoS

#1

Post by infinitnet » Sat, Mar 21, 2015, 1:46 PM UTC

Chinese Activists under DDoS
anti-ddos-protection.com

Re: Chinese Activists under DDoS

#2

Post by mg1982 » Sat, Mar 21, 2015, 2:23 PM UTC

Shouldn't it be just anti-ddos or ddos-protection? I read anti-ddos-protetion to mean that they're against the things that protect against ddos. Which they're not.

Re: Chinese Activists under DDoS

#3

Post by Caelish » Sat, Mar 21, 2015, 2:28 PM UTC

I actually sent an email offering to help (I have a lot of experience mitigating DDoS attacks) but never received a reply. I imagine they must already have something in the works to resolve this.

Re: Chinese Activists under DDoS

#4

Post by KhalilK » Sat, Mar 21, 2015, 2:40 PM UTC

Caelish wrote: post #3

I actually sent an email offering to help (I have a lot of experience mitigating DDoS attacks) but never received a reply. I imagine they must already have something in the works to resolve this.

Just curious, how are DDoS attacks mitigated?

Re: Chinese Activists under DDoS

#5

Post by Caelish » Sat, Mar 21, 2015, 2:47 PM UTC

KhalilK wrote: post #4

Caelish wrote: post #3

I actually sent an email offering to help (I have a lot of experience mitigating DDoS attacks) but never received a reply. I imagine they must already have something in the works to resolve this.

Just curious, how are DDoS attacks mitigated?

Depends on the attack and how sophisticated it is. For most layer 7 attacks like this one, you can filter e.g. specific user agents or protocols. One thing that often works (but has some false positives with simpler search engines) is dropping all HTTP/1.0 traffic, because any remotely modern browser uses HTTP/1.1. Essentially you block anything that's unusual, like specific user agents (reflected attacks from user agents containing 'Wordpress' and 'PHP' come to mind a lot especially), HTTP headers, and so forth. Ideally as far upstream as possible, but it can be done on the server level as long as you have enough horsepower to throw at iptables or the web server, and your connection doesn't get saturated. The right IP blacklists can help a lot as well.

Re: Chinese Activists under DDoS

#6

Post by cbz1995 » Sat, Mar 21, 2015, 3:19 PM UTC

Could you give a report of the statistics of the IP address in the DDOS attack? Maybe you can block all the ip address from China. As I known in China people have to use VPN to access some sensitive websites (such as 8964, falungong, dajiyuan).

Re: Chinese Activists under DDoS

#7

Post by cbz1995 » Sat, Mar 21, 2015, 3:23 PM UTC

BTW: you can put the contents of Greatfire.org to github, it is free.

Re: Chinese Activists under DDoS

#8

Post by nerdy » Sat, Mar 21, 2015, 3:50 PM UTC

China operating under an unprecedented level of transparency!

Re: Chinese Activists under DDoS

#9

Post by infinitnet » Sat, Mar 21, 2015, 4:03 PM UTC

Caelish wrote: post #3

I actually sent an email offering to help (I have a lot of experience mitigating DDoS attacks) but never received a reply. I imagine they must already have something in the works to resolve this.

I think a lot of people already did this (including me) and they're probably flooded with offers. Thanks for the support though, I'm sure they're happy about any they get. It's about time to demolish the great firewall of China. :-)

Re: Chinese Activists under DDoS

#10

Post by infinitnet » Sat, Mar 21, 2015, 4:15 PM UTC

mg1982 wrote: post #2

Shouldn't it be just anti-ddos or ddos-protection? I read anti-ddos-protetion to mean that they're against the things that protect against ddos. Which they're not.

Probably they're going to bash DDoS protection providers there in the future, who knows. ;-)