Pennock's Fiero Forum
  General Fiero Chat
  Another day, another DDoS attack

Post New Topic  Post A Reply
Email This Page to Someone! | Printable Version


next newest topic | next oldest topic
Another day, another DDoS attack by Cliff Pennock
Started on: 04-03-2025 07:18 AM
Replies: 8 (230 views)
Last post by: Cliff Pennock on 04-08-2025 06:00 PM
Cliff Pennock
Administrator
Posts: 11854
From: Zandvoort, The Netherlands
Registered: Jan 99


Feedback score: (2)
Leave feedback





Total ratings: 699
Rate this member

Report this Post04-03-2025 07:18 AM Click Here to See the Profile for Cliff PennockClick Here to visit Cliff Pennock's HomePageSend a Private Message to Cliff PennockEdit/Delete MessageReply w/QuoteDirect Link to This Post
So if the forum seems a little sluggish at the moment, it's because there has been a DDoS attack going on since yesterday evening. Currently, somewhere between 20,000 and 30,000 computers are hitting fiero.nl with traffic. My firewall is keeping up so in all honestly, it's hardly more than a nuisance at the moment but I'm constantly monitoring the situation.

BTW, this is also why you see this:


IP: Logged
PFF
System Bot
Doggo
Member
Posts: 84
From: Chicagoland suburbs
Registered: Mar 2024


Feedback score: N/A
Leave feedback

Rate this member

Report this Post04-03-2025 08:02 AM Click Here to See the Profile for DoggoSend a Private Message to DoggoEdit/Delete MessageReply w/QuoteDirect Link to This Post
What would happen if someone like really famous gave us a shoutout and we got hit with like 100,000 legitimate users trying to connect to fiero.nl

Is it something malicious about the bots that are sending traffic or just the sheer amount of traffic causing the problems

[This message has been edited by Doggo (edited 04-03-2025).]

IP: Logged
Cliff Pennock
Administrator
Posts: 11854
From: Zandvoort, The Netherlands
Registered: Jan 99


Feedback score: (2)
Leave feedback





Total ratings: 699
Rate this member

Report this Post04-03-2025 08:10 AM Click Here to See the Profile for Cliff PennockClick Here to visit Cliff Pennock's HomePageSend a Private Message to Cliff PennockEdit/Delete MessageReply w/QuoteDirect Link to This Post
 
quote
Originally posted by Doggo:

What would happen if someone like really famous gave us a shoutout and we got hit with like 100,000 legitimate users trying to connect to fiero.nl


The server would not be able to handle that. In fact, most servers would not be able to handle that.

 
quote
Is it something malicious about the bots that are sending traffic or just the sheer amount of traffic causing the problems


Amount of traffic.
IP: Logged
Patrick
Member
Posts: 38405
From: Vancouver, British Columbia, Canada
Registered: Apr 99


Feedback score: (1)
Leave feedback





Total ratings: 465
Rate this member

Report this Post04-03-2025 01:52 PM Click Here to See the Profile for PatrickSend a Private Message to PatrickEdit/Delete MessageReply w/QuoteDirect Link to This Post
 
quote
Originally posted by Cliff Pennock:

Currently, somewhere between 20,000 and 30,000 computers are hitting fiero.nl with traffic.


Cliff, any chance that's connected to This?
IP: Logged
Cliff Pennock
Administrator
Posts: 11854
From: Zandvoort, The Netherlands
Registered: Jan 99


Feedback score: (2)
Leave feedback





Total ratings: 699
Rate this member

Report this Post04-03-2025 02:14 PM Click Here to See the Profile for Cliff PennockClick Here to visit Cliff Pennock's HomePageSend a Private Message to Cliff PennockEdit/Delete MessageReply w/QuoteDirect Link to This Post
 
quote
Originally posted by Patrick:

Cliff, any chance that's connected to This?


Sorry for being dense here, but I don't see why that would be the cause for a DDoS attack?

I honestly have no idea why fiero.nl was targeted. It looked like one of those typical, off-the-shelf DDoS attacks you can buy on the dark web for fifty bucks. The goal was to overwhelm the server by bombarding it with massive amounts of page requests.

Fortunately, almost the entire forum is cached in RAM, so the server barely broke a sweat handling the load. Plus, most of the requests were coming from countries where it’s highly unlikely anyone’s actually interested in Fieros. I mean, how many Fieros could there possibly be in Uzbekistan or Honduras? Sure, maybe there are a few in China or even Albania, but let’s be honest - most of that traffic probably wasn’t legit.

So in the end, it wasn’t too hard to block traffic from those regions, and while the attack was annoying, it was mostly just a nuisance.
IP: Logged
Patrick
Member
Posts: 38405
From: Vancouver, British Columbia, Canada
Registered: Apr 99


Feedback score: (1)
Leave feedback





Total ratings: 465
Rate this member

Report this Post04-03-2025 02:45 PM Click Here to See the Profile for PatrickSend a Private Message to PatrickEdit/Delete MessageReply w/QuoteDirect Link to This Post
 
quote
Originally posted by Cliff Pennock:

Sorry for being dense here, but I don't see why that would be the cause for a DDoS attack?


I thought it might be possible that this mention of a Fiero in a highly circulated RockAuto blurb could've led to an extra 20,000 or so hits on a Fiero website. Or maybe not.

IP: Logged
Cliff Pennock
Administrator
Posts: 11854
From: Zandvoort, The Netherlands
Registered: Jan 99


Feedback score: (2)
Leave feedback





Total ratings: 699
Rate this member

Report this Post04-03-2025 02:48 PM Click Here to See the Profile for Cliff PennockClick Here to visit Cliff Pennock's HomePageSend a Private Message to Cliff PennockEdit/Delete MessageReply w/QuoteDirect Link to This Post
 
quote
Originally posted by Patrick:

I thought it might be possible that this mention of a Fiero in a highly circulated RockAuto blurb could've led to an extra 20,000 or so hits on a Fiero website. Or maybe not.


Ah ok! 😊

No, this wasn't legitimate traffic. I could tell by the pages targeted and the countries this traffic came from.
IP: Logged
pokeyfiero
Member
Posts: 16228
From: Free America!
Registered: Dec 2003


Feedback score: N/A
Leave feedback





Total ratings: 309
Rate this member

Report this Post04-07-2025 10:52 PM Click Here to See the Profile for pokeyfieroClick Here to visit pokeyfiero's HomePageSend a Private Message to pokeyfieroEdit/Delete MessageReply w/QuoteDirect Link to This Post
What is the purpose of these attacks?
IP: Logged
Cliff Pennock
Administrator
Posts: 11854
From: Zandvoort, The Netherlands
Registered: Jan 99


Feedback score: (2)
Leave feedback





Total ratings: 699
Rate this member

Report this Post04-08-2025 06:00 PM Click Here to See the Profile for Cliff PennockClick Here to visit Cliff Pennock's HomePageSend a Private Message to Cliff PennockEdit/Delete MessageReply w/QuoteDirect Link to This Post
 
quote
Originally posted by pokeyfiero:

What is the purpose of these attacks?


I wish I knew...

Maybe I was a random target by someone testing out a bot net. Maybe it's someone who's pissed at me, the forum or someone else on the forum. Your guess is as good as mine.
IP: Logged

next newest topic | next oldest topic

All times are ET (US)

Post New Topic  Post A Reply
Hop to:

Contact Us | Back To Main Page

Advertizing on PFF | Fiero Parts Vendors
PFF Merchandise | Fiero Gallery
Real-Time Chat | Fiero Related Auctions on eBay



Copyright (c) 1999, C. Pennock