Under Attack

Ickie

Ickie

SOH Administrator
Since 6 am eastern, we have been under brute force attacks, from Brazil, England, and Chile. These were email DOS attacks aimed at my personal website again Ickie.net, so once again I had to turn off www.ickie.net

I did report my logs to the ISP's involved, to close the IP's doing the attacks.
 
here are the 3 , note listed below is just a piece of what is in my logs, but they bombarded me with 100,000 + emails accounts in just minutes causing the server to go out/down
they used every conceivable name at ickie.net to send out spam, note there is only 1 email address at ickie.net and it is me,
This caused the server to have to think, than remove and tell sender there is no such person at ickie.net. and do this 100,000 a minute and it just goes down.


2009-07-09 05:13:00 H=200-169-100-73.pap.dualtec.com.br (mail.drogariasaopaulo.com.br) [200.169.100.73] Warning: Sender rate 107.6 / 1h

2009-07-09 04:28:42 H=(POSSUM.cartesian.co.uk) [80.168.29.23] Warning: Sender rate 54.8 / 1h

2009-07-09 04:35:21 H=(srv-root.alpha.local) [190.54.21.92] Warning: Sender rate 54.8 / 1h
 
These are the things that make me rethink not having a gun...:angryfir:
 
Rami said:
These are the things that make me rethink not having a gun...:angryfir:
Click to expand...

Then its good you don't :icon_lol:

There is a possibility that these attacks could be coming from Bots and not the actual criminal who is in charge of it.

You wouldn't want to shoot or threaten the wrong person would you? :kilroy:

If so I shut up now :monkies:

My question is what is to be gained from attacking Ikie.net :isadizzy:
 
I don't think so, ickie.net has been around a long time and it is on everyones hit list, its just a number or code and when they no longer can attack it the attacks will stop.
 
all the recent attacks on ickie.net have have been email dos attacks.
I have ickie.net supended now and all its mail is being handled by the registar where I bought the name. its now their headake, lol
 
This is going on all over the U.S., on Government sites and meany others.
I saw this on the news last night. ckissling
 
I just bought domaine forwarding, now ickie.net lives and is pointed at my new site with a mask in place to hide where it really lives.
it is no longer on this server.

it may take a few days to work right.
 
You should try setting up a honey pot email server on the old address - this is a mail server that waits the maximum amount of time (defined in the SMTP specs) between each message sent/received, and then does nothing with the data except throw it in the bit bucket (so it eats up a lot of bot time, with no actual work being done :-> ).

Tim
 
I noticed last night around 00:30 CST it was difficult to bring up SOH. My browser kept saying it couldn't find the site or it would time out.

-G-
 
You must log in or register to reply here.
Back
Top