5 ms·
Prolly exploiting a known vulnerability. Have you patched and rebooted all of your systems? Removed accounts that you dont use? Change pw's to everything? Wind
by sarcasmatwork 7y ago
Prolly exploiting a known vulnerability. Have you patched and rebooted all of your systems? Removed accounts that you dont use? Change pw's to everything?
Windows or Linux systems?
You can do some mitigation with iptables in linux.
>He has proved that he can by taking our sites offline for a minute.
What did this person take down exactly? The web server, or did he reboot the system?
- thomasfromcdnjs 7y agoThey simply hit one of our url's, and we could put url's on that but they could just hit one of many. Our system is scalable but we also don't want to scale indefinitely because of the attacks.
- sigmaprimus 7y agoThe fact that cloudflare was defeated shows it was a ddos and not a reboot. Most likely a bot net rented with BTC and nothing more than a fishing expedition. Unless they are being targeted for some other reason than money the problem will go away.
- CloudNetworking 7y ago> The fact that cloudflare was defeated shows it was a ddos and not a reboot. How?
- sigmaprimus 7y agoIt shows that it was a DDos simply by the fact that is what Cloudflare does? Protects against DDos attacks? IDK maybe your right, I supposed they could have spoofed a DDos using a small botnet and simultaneously rebooted the servers. That would require a level of sophistication but certainly possible.