Post AL9bsS1m0vEX5NXsH2 by dcid@noc.social
(DIR) More posts by dcid@noc.social
(DIR) Post #AL9azg5w0kiamrNFHE by dcid@noc.social
2022-07-04T16:34:33Z
0 likes, 2 repeats
Analysis of a HTTP-based DDoS.-7,000 different attacking IP addresses.-20,000+ requests per second.-DDoS-for-hire?https://trunc.org/learning/http-flood-attack-ddos-analyzed
(DIR) Post #AL9aziiIH6aeuPKuLQ by amerika@noagendasocial.com
2022-07-04T16:43:48Z
0 likes, 0 repeats
@dcid Similar to what hit us a few years back. Very simple, very hard to mediate except by blackholing participants, almost all of which were cloud services rented with stolen credit cards. $40 a day apparently.
(DIR) Post #AL9bsS1m0vEX5NXsH2 by dcid@noc.social
2022-07-04T16:53:41Z
0 likes, 0 repeats
@amerika do you still have the logs by chance? Would love to see if the attacking IPs are the same if you don't mind sharing.
(DIR) Post #ALAOjAVEhGOHshWtay by amerika@noagendasocial.com
2022-07-05T02:01:05Z
0 likes, 0 repeats
@dcid No, sadly. It was clear that these were temporary sites, either cloud storage or unsecured home machines.