dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
12435

SeattleMatt
Streaming Tech Director
Premium Member
join:2001-12-28
Seattle, WA

SeattleMatt to Anonymous_

Premium Member

to Anonymous_

Re: Todays DDOS (site down)

Seeing major 50% Packet loss to the site as of 6pm.

Anyone else reporting this????

Anonymous_
Anonymous
Premium Member
join:2004-06-21
127.0.0.1

1 edit

Anonymous_

Premium Member

i am getting 100% loss i do not think it's an big deal if your pings are timing out
Turbocpe
Premium Member
join:2001-12-22
IA

Turbocpe to SeattleMatt

Premium Member

to SeattleMatt
said by SeattleMatt:

Seeing major 50% Packet loss to the site as of 6pm.

Anyone else reporting this????
If it really were 50% packet loss, you would either not be able to access the site, or it would be extremely slow and nearly impossible to access. It's likely just a priority issue. Since one of the last attacks, it has been mentioned that you can no longer ping BBR with accurate results as it doesn't always respond to the ICMP requests.

La Luna
Fly With The Angels My Beloved Son Chris
Premium Member
join:2001-07-12
New Port Richey, FL

1 edit

La Luna to justin

Premium Member

to justin
I've been kicked out for the last hour (Mele can't get here either by the way, we've been conversing over at Wilders). I'm here via a proxy right now.

I get nothing, zip, ziltch, just a white page trying to get here the normal way.

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\XXXXX>ping www.dslreports.com

Pinging dslreports.com [209.123.109.175] with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 209.123.109.175:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

C:\Documents and Settings\XXXXX>

Tracing route to dslreports.com [209.123.109.175]
over a maximum of 30 hops:

1 1 ms 1 ms 1 ms 192.168.100.2
2 7 ms 7 ms 7 ms 10.63.64.1
3 10 ms 9 ms 7 ms dstswr1-vlan-2.rh.wmfdnj.cv.net [67.83.252.33]
4 * * * Request timed out.
5 * * * Request timed out.
6 * * * Request timed out.
7 11 ms 15 ms 12 ms rtr4-tg11-1.in.nycmny83.cv.net [64.15.0.41]
8 * * * Request timed out.
9 13 ms 13 ms 11 ms 0.e1-3.tbr1.tl9.nac.net [209.123.10.73]
10 13 ms 12 ms 12 ms 0.e1-4.tbr1.mmu.nac.net [209.123.10.101]
11 14 ms 13 ms 13 ms 0.e-1-1.tbr1.oct.nac.net [209.123.10.17]
12 13 ms 13 ms 123 ms 0.ge-1-2-0.gbr1.oct.nac.net [209.123.10.58]
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 * * * Request timed out.
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

Trace complete.

C:\Documents and Settings\XXXX>

exocet_cm
Writing
Premium Member
join:2003-03-23
Brooklyn, NY

exocet_cm to justin

Premium Member

to justin
For the folks that can't get here, an IRC room available?

Its a Secret
Please speak into the microphone
Premium Member
join:2008-02-23
Da wet coast

Its a Secret to justin

Premium Member

to justin
Pinging 209.123.109.175 with 32 bytes of data:

Request timed out.
Reply from 209.123.109.175: bytes=32 time=67ms TTL=53
Reply from 209.123.109.175: bytes=32 time=68ms TTL=53
Reply from 209.123.109.175: bytes=32 time=67ms TTL=53

Ping statistics for 209.123.109.175:
Packets: Sent = 4, Received = 3, Lost = 1 (25% los
Approximate round trip times in milli-seconds:
Minimum = 67ms, Maximum = 68ms, Average = 67ms

Lost wo BBR
@jillyred.net

Lost wo BBR to justin

Anon

to justin
I am not able to come in through normal means. I am using a proxy to get here. Are any Comcast ip's being blocked? Jovi btw.

Jovi
Premium Member
join:2000-02-24
Mount Joy, PA

Jovi

Premium Member

said by Lost wo BBR :

I am not able to come in through normal means. I am using a proxy to get here. Are any Comcast ip's being blocked? Jovi btw.
Okay. Just able to log in now.

La Luna
Fly With The Angels My Beloved Son Chris
Premium Member
join:2001-07-12
New Port Richey, FL

La Luna

Premium Member

yep, me too. I've been fixed.

Name Game
Premium Member
join:2002-07-07
Grand Rapids, MI

Name Game to justin

Premium Member

to justin
Your mileage might vary

»www.dnsstuff.com/tools/t ··· .109.175

AB57
Premium Member
join:2006-04-04
equatorial

6 recommendations

AB57 to La Luna

Premium Member

to La Luna
said by La Luna:

. . Mele can't get here either . . . .
There's an old saying that every cloud has a silver lining . . .
Mele20
Premium Member
join:2001-06-05
Hilo, HI

1 edit

Mele20 to La Luna

Premium Member

to La Luna
Hi again La Luna....fancy meeting you here!

I see you got invited also to do the proxy test. I'm so grateful because I have not been able to get to this site via the regular address or the IP given to members since the attack started at 10PM HST March 18 when I suddenly could not post my forum remark. I use Ping Plotter's TCP engine so dslr should be responding to those pings but Ping Plotter is showing 73% packet loss at dslr hop and both dslr and nac.net show "error" on the last two hops since last night. The alternative IP, around 2AM HST, let me login and then immediately flipped me back to the front page announcement. About an hour ago, that IP was seen by the Proxomitron to be unaccessible. So, I am so happy to be able to get here on this proxy.

This is a really rotten thing to do to dslr. I reported the Road Runner IP addresses on the list to RR abuse but that was just a drop in the bucket. Thanks Justin and nil for all the hard work and keeping the site up as much as possible.

EDIT: right after posting this I saw La Luna's post saying she could now get here normally. I checked Ping Plotter and it was showing normal pings to dslr for the first time since last night. So, I tried to get here normally and was able to do so!

rob_in_chatt
Premium Member
join:2004-09-17
Chattanooga, TN

rob_in_chatt to justin

Premium Member

to justin
punk bastards on spring break with nothing better to do i guess.

PolarBear03
The bear formerly known as aaron8301
Premium Member
join:2005-01-03

PolarBear03 to dliw

Premium Member

to dliw
said by dliw:

said by kkb2:

Welcome back Justin! Thank you for your effort and the great site.
Hear~Hear!
I second -er, third that!

David
Premium Member
join:2002-05-30
Granite City, IL

David

Premium Member

justin

Do you need anything for me to turn over to security on our end (at&t that is)?

Let me know, or if you want post the IP's in the direct forum.

Thanks
david

justin
..needs sleep
Mod
join:1999-05-28
2031
Billion BiPAC 7800N
Apple AirPort Extreme (2011)

1 recommendation

justin

Mod

thanks, but don't worry about it. I actually didn't expect individual IPs to be shut off (although I should have thought about it harder, the list wasn't 100% clean) my intent was for someone to id and possible kick over the command/control machine which normally requires snooping the traffic to a zombie to see where it is getting instructions from.

taking out individual hosts is kind of a losing proposition - labor intensive, and the hosts are easily replaced by others. The vast majority of these IPs were overseas anyway.

they've fallen silent now anyway so as far as the site goes it is over with..

David
Premium Member
join:2002-05-30
Granite City, IL

David

Premium Member

Ok, yea I guess that would be kind of labor intensive nailing them one at a time.

I guess next time I can have your people talk with mine?

La Luna
Fly With The Angels My Beloved Son Chris
Premium Member
join:2001-07-12
New Port Richey, FL

La Luna to Mele20

Premium Member

to Mele20

Re: Todays DDOS (site down)

said by Mele20:

Hi again La Luna....fancy meeting you here!

I see you got invited also to do the proxy test. I'm so grateful because I have not been able to get to this site via the regular address or the IP given to members since the attack started at 10PM HST March 18 when I suddenly could not post my forum remark. I use Ping Plotter's TCP engine so dslr should be responding to those pings but Ping Plotter is showing 73% packet loss at dslr hop and both dslr and nac.net show "error" on the last two hops since last night. The alternative IP, around 2AM HST, let me login and then immediately flipped me back to the front page announcement. About an hour ago, that IP was seen by the Proxomitron to be unaccessible. So, I am so happy to be able to get here on this proxy.

This is a really rotten thing to do to dslr. I reported the Road Runner IP addresses on the list to RR abuse but that was just a drop in the bucket. Thanks Justin and nil for all the hard work and keeping the site up as much as possible.

EDIT: right after posting this I saw La Luna's post saying she could now get here normally. I checked Ping Plotter and it was showing normal pings to dslr for the first time since last night. So, I tried to get here normally and was able to do so!
Hi Mele!!! LOL!!!

Yeah, that little proxy app worked very nicely.

Name Game
Premium Member
join:2002-07-07
Grand Rapids, MI

1 recommendation

Name Game to Mele20

Premium Member

to Mele20
Click for full size
said by Mele20:

So, I tried to get here normally and was able to do so!
Same here.. but I am never normal after driving that jersey turnpike to get to the server.

dvd536
as Mr. Pink as they come
Premium Member
join:2001-04-27
Phoenix, AZ

dvd536 to exocet_cm

Premium Member

to exocet_cm
said by exocet_cm:

For the folks that can't get here, an IRC room available?
theres the unofficial room on removed's server

irc.removed.us

#dslr

panda0
Visualize Whirled Peas
join:2000-01-08
Largo, FL

panda0 to doppler

Member

to doppler
said by doppler:

I always thought you can turn the tables on these guys.

A couple of times I ran a small limited FTP for a few forum
friends. To pass about a couple of large files. I only
limited to 2 open connections and not anon. Of course some
jerks, would not follow the 2 rules.

Since this was a while back. And they all were running
windoze boxes. Simple ping-of-death was possible, to knock
off the offender.

I know, you will not get the botmaster. But maybe a few
slaves would wonder why they froze and fix there damn systems.

Maybe I am being to simplistic and assuming some intelligence
of the end-parties.
The fact that their IP is pwned is proof of their limited or non-existent intelligence.

And, your "forum friends" with the learning disability are further proof of limited intelligence.

I too tried running an ftp server, but nobody followed "the rules". I guess my friends are even dumber than yours.

I like the idea of ddos-ing the botnets, though. I wish there was an automatic way to do that...

djlandkpl
join:2007-12-27
Norton, MA

djlandkpl to justin

Member

to justin
I can't get in via Comcast. I'm currently accessing thru a proxy.

Smith6612
MVM
join:2008-02-01
North Tonawanda, NY

Smith6612 to justin

MVM

to justin
I saw the message a few days ago the morning it happened. I was not home then, but I wasn't able to log in, but the site was responding nicely.

sansri88
digital is here
Premium Member
join:2005-12-17
New York, NY

sansri88 to justin

Premium Member

to justin
Justin! What happened now?

nil

join:2000-11-27

nil

This was unrelated, just some gremlins needed flushing out.

sansri88
digital is here
Premium Member
join:2005-12-17
New York, NY

sansri88

Premium Member

Phew good. I thought we were under attack again.

Name Game
Premium Member
join:2002-07-07
Grand Rapids, MI

3 edits

Name Game to sansri88

Premium Member

to sansri88
Appears to be happening again

This works very well

ht tp://209.123.109.175/forum/security

but not this many times during the day..

ht tp://www.dslreports.com/forum/security

edit..thanks nil

Jafo232
You Can't Spell Democrat Without Rat.
Premium Member
join:2002-10-17
Boonville, NY

Jafo232

Premium Member

Finally able to get back on now.. Still a bit intermittent but much better..

Probably unlikely, but I hope that we someday find out who this individual(s) is.

David
Premium Member
join:2002-05-30
Granite City, IL

David

Premium Member

To Karl

Are you doing a news article today entitled

"From Russia, with love" and putting a Bond pic up as a photo?

We will have evil characters like boris and natasha.

Gone Fishing
Premium Member
join:2001-06-29

1 edit

Gone Fishing to justin

Premium Member

to justin

Re: Todays DDOS (site down)

NM