DoS attacks or why isoHunt has been unstable

Posted: Mon Jan 12, 2009 9:32 am

Starting a couple hours before midnight GMT on 10-Jan-2009 we started receiving a lot more requests and traffic than we would normally have at that time of day, which topped out at 8500 CPS (connections per second) before we could get in, figure out what was happening and act to mitigate it. Thankfully, the folks that attacked us the first time made it fairly easy for us to locate and filter their traffic, since I don't think there are many people living in South America or Asia who legitimately run their browsers in Russian Smile

Update: it turns out that the /js/rss hits aren't actually a DDoS like I originally thought, and is instead the fault of one of those silly IE "toolbars" that refused to respect the TTL we set in our RSS feed. Currently testing a fix, and if the fix works, I'll be sure to turn RSS back on again.

SecretSquirrel wrote:

Rounds 2 and 3 weren't so generous. Round 2 had 171,892 unique ips all hitting /js/rss.php. Round 3 is ongoing and we're still struggling to find a way to mitigate the attack beyond completely turning off our rss (which is where things stand now). So, if you've used our RSS in the past, or are attempting to use it now, and are legitimate, I would suggest that you stop using our feed until we get this figured out (which will be accompanied by a post to the front page stating that rss feeds are back on).

If you're reading this, and you're responsible for any of these attacks, I would like to give you the opportunity to be heard. You may either PM me on the forums or send us an email at admin@this site's domain.

Posted: Mon Jan 12, 2009 10:22 am

Bastards!

Posted: Mon Jan 12, 2009 11:08 am

Found this about a week ago http://www.theregister.co.uk/2008/01/04/changing_face_of_ddos/
although this Russian groups agenda seems more political. Also read something about a group named MORRADi takin down Norbits last summer.I'm quite suprised how easy it is for these groups to recruit individuals with little experience and successfully launch theses attacks. I guess it's not really relevant but found it interesting none the less. Best of luck.

Posted: Mon Jan 12, 2009 11:11 am

I wonder what they want, what would appease them? Maybe if we have a section about how Putin is the most manly man ever or something Very Happy

Posted: Mon Jan 12, 2009 12:33 pm

Just curious if we knew what the offending "toolbar" is?

Posted: Mon Jan 12, 2009 12:50 pm

there's lots of offending toolbars, all from the same company (which i won't name at this point, since they should be on their way to fixing the problem permanently)

Posted: Mon Jan 12, 2009 5:26 pm

Bet it was the MPAA trying to mess us up Shocked

Posted: Tue Jan 13, 2009 10:31 am

...wow... you guys are so modest about this standoff between yourselves and the MPAA's hired goons doing their dirty work... Fighting them off like Rhino a featured character in the new disney action movie BOLT (which i downloaded from this site)

Keep rocking and since I didn't have this acct when u broke 1 terabyte I'll say it now, CONGRATS (although it says 1294TB meaning you would have 1.2 petabytes heh heh...but i digress) Wooo power to the people!!

Posted: Tue Jan 13, 2009 11:03 am

Haters or anti-torrents and p2p people can attack or some bored nerds or even MPAA can mess with it set some hackers to get the site down

Everything is possible

Posted: Tue Jan 13, 2009 1:41 pm

Like most things, this issue will be resolved and this will just be a fading memory as the site moves on into the future.

Posted: Tue Jan 13, 2009 5:31 pm

USAFboi wrote:

...wow... you guys are so modest about this standoff between yourselves and the MPAA's hired goons doing their dirty work... Fighting them off like Rhino a featured character in the new disney action movie BOLT (which i downloaded from this site)

Keep rocking and since I didn't have this acct when u broke 1 terabyte I'll say it now, CONGRATS (although it says 1294TB meaning you would have 1.2 petabytes heh heh...but i digress) Wooo power to the people!!

I think you're a bit of an idiot. They didn't break the 1 Terabyte mark, I have a frickin' 1TB drive in my computer, that amount of space is so doable. They did indeed break the 1PB mark of indexing. Link: http://isohunt.com/forum/viewtopic.php?t=145853

Posted: Tue Jan 13, 2009 7:00 pm

Hahahaha,tell it like it is Magnum7385

Quote:

I think you're a bit of an idiot. They didn't break the 1 Terabyte mark, I have a frickin' 1TB drive in my computer, that amount of space is so doable. They did indeed break the 1PB mark of indexing. Link: http://isohunt.com/forum/viewtopic.php?t=145853

Posted: Tue Jan 13, 2009 7:45 pm

there always be some other people who want to get profit from others... Good luck.

Posted: Wed Jan 14, 2009 8:48 am

Wow terrorist doing the dirty on the internet now?? The new ages arises with an iron fist. Does this mean the troops go into Russia now? Razz

Posted: Wed Jan 14, 2009 12:26 pm

and vice versa, the US has an infant anti-terrorist cybernet defense force, but most of US is defended by h4x0rz