An individual or group has been targeting RVF since Friday night. Here's what I know:
1. He is using a dedicated server over at http://www.psychz.net/ to launch a DDOS attack from a single IP address. In one day, he initiated over 130,000 connections. The traffic seems to mirror normal traffic so the forum software thinks it's a legitimate user, though at the same time it doesn't count on the "Who's Online" stat.
2. The attack has been too small to cause major disruption to the server (we're on a server that is much larger than our needs), but you may have noticed intermittent slowness since Friday.
3. After banning one IP address, the attacker moved to a second IP on the same node. Psychz.net has been contacted that their service is being abused and my host is helping me to prevent further disruption. Here's how the attack looks like:
As you see, there is a large number of connections coming from the last IP, which belings to Psychz.net. (The second-to-last IP is from Ukraine, which looks suspicious).
As of right now, the server is not experiencing any problems, but I expect the attacker to continue this. No one has claimed responsibility for the attack and as we have many enemies, I have no idea who is behind it.
This is a sensitive time for us, so Tuth and I will take zero tolerance on those starting bullshit threads or engaging in subtle trolling (read Tuth's announcement). Things that would normally result in a temporary suspension may get a ban. Keep it clean.
1. He is using a dedicated server over at http://www.psychz.net/ to launch a DDOS attack from a single IP address. In one day, he initiated over 130,000 connections. The traffic seems to mirror normal traffic so the forum software thinks it's a legitimate user, though at the same time it doesn't count on the "Who's Online" stat.
2. The attack has been too small to cause major disruption to the server (we're on a server that is much larger than our needs), but you may have noticed intermittent slowness since Friday.
3. After banning one IP address, the attacker moved to a second IP on the same node. Psychz.net has been contacted that their service is being abused and my host is helping me to prevent further disruption. Here's how the attack looks like:
As you see, there is a large number of connections coming from the last IP, which belings to Psychz.net. (The second-to-last IP is from Ukraine, which looks suspicious).
As of right now, the server is not experiencing any problems, but I expect the attacker to continue this. No one has claimed responsibility for the attack and as we have many enemies, I have no idea who is behind it.
This is a sensitive time for us, so Tuth and I will take zero tolerance on those starting bullshit threads or engaging in subtle trolling (read Tuth's announcement). Things that would normally result in a temporary suspension may get a ban. Keep it clean.
Roosh
http://www.rooshv.com