It would appear that the server is under attack. And not from the googlebot or some other out of control crawler. This isn't http traffic. I don't know what it is. It is a single incoming spike in traffic that has happened like clockwork once an hour since yesterday. My guess, from a day of frantic googling, is that we are under a denial of service attack from a bot net. It's a pretty weak attack (incoming traffic only spikes to 2 mb/s, and it's just one spike an hour, not constant,) but evidently this sort of thing happens (presumably it's intermittent because the bot net is rotating through attacks on many different hosts.)
Of course, it still might not be anything malicious, but the traffic graphs are really weird, and my intuition is that it is malicious. This does seem strange though because we are really not hosting any controversial content.
I have mailed hurricane (my host) yesterday, but hadn't heard back yet so I just called. They had me mail the info to a different address where they said it would be looked at.
I'll let you know what I find. So far it is clearly not impacting the server (everything seems pretty snappy,) but the traffic level is very worrisome.
It's a flood of email traffic. Yuck. Luckily it has at least temporarily stopped. Nothing since 11:00 pm last night. I am praying they have given up.
Really makes you feel helpless.
That guy in England just bought his third home. "It's bloody capitalism, innit?"
I did try to log on to digitalmediatree from an outside office last week that has all kinds of firewalls - and it said digitalmediatree was blocked due to 'pornographic content'. just fyi.
fuck!
i got that too outside the vinalhaven library trying to slip in on their wifi. fiuck!
|
Of course, it still might not be anything malicious, but the traffic graphs are really weird, and my intuition is that it is malicious. This does seem strange though because we are really not hosting any controversial content.
I have mailed hurricane (my host) yesterday, but hadn't heard back yet so I just called. They had me mail the info to a different address where they said it would be looked at.
I'll let you know what I find. So far it is clearly not impacting the server (everything seems pretty snappy,) but the traffic level is very worrisome.
- jim 9-03-2005 9:52 pm
It's a flood of email traffic. Yuck. Luckily it has at least temporarily stopped. Nothing since 11:00 pm last night. I am praying they have given up.
Really makes you feel helpless.
- jim 9-05-2005 6:47 pm [add a comment]
That guy in England just bought his third home. "It's bloody capitalism, innit?"
- tom moody 9-05-2005 6:53 pm [add a comment]
I did try to log on to digitalmediatree from an outside office last week that has all kinds of firewalls - and it said digitalmediatree was blocked due to 'pornographic content'. just fyi.
- selma 9-05-2005 11:14 pm [add a comment]
fuck!
- mark 9-05-2005 11:37 pm [add a comment]
i got that too outside the vinalhaven library trying to slip in on their wifi. fiuck!
- bill 9-06-2005 4:56 am [add a comment]