Web Hosting Talk







View Full Version : DDoS on WHT


RofyHost
12-19-2004, 03:55 PM
Hello everybody,

I have been chocked today trying access webhostingtalk.com, for the FIRST time it was down for me, all other sites works fine, I have not been able to access it for about an hour anyone had the same problem???

Webhostingtalk.com From Morocco : 2004/12/19 19:05 GMT

|------------------------------------------------------------------------------------------|
| WinMTR statistics |
| Host - % | Sent | Recv | Best | Avrg | Wrst | Last |
|------------------------------------------------|------|------|------|------|------|------|
| adsl-1-136-192-81.adsl2.iam.net.ma - 0 | 6 | 6 | 70 | 71 | 80 | 70 |
|ll212-2-77-126-217-212.ll212-2.iam.net.ma - 0 | 6 | 6 | 70 | 122 | 341 | 70 |
|So1-3-1-0-grtmadpe2.red.telefonica-wholesale.net - 17 | 6 | 5 | 260 | 266 | 270 | 260 |
|GE6-0-0-0-grtmadpe1.red.telefonica-wholesale.net - 0 | 6 | 5 | 260 | 266 | 271 | 270 |
|P15-0-grtparix2.red.telefonica-wholesale.net - 0 | 6 | 6 | 290 | 295 | 310 | 310 |
| 213.140.36.157 - 17 | 6 | 5 | 280 | 284 | 291 | 291 |
|telia-4-1-3-0-grtparix1.red.telefonica-wholesale.net - 17 | 6 | 5 | 290 | 296 | 311 | 291 |
| 213.248.70.1 - 0 | 6 | 5 | 280 | 290 | 310 | 310 |
| 213.248.64.10 - 0 | 6 | 5 | 301 | 304 | 310 | 301 |
| 213.248.65.90 - 0 | 6 | 5 | 381 | 396 | 421 | 391 |
| 213.248.80.134 - 20 | 6 | 4 | 371 | 383 | 400 | 371 |
| 213.248.80.138 - 20 | 6 | 4 | 370 | 380 | 390 | 381 |
| 213.248.88.118 - 0 | 5 | 5 | 230 | 246 | 261 | 261 |
| 69.20.1.40 - 0 | 5 | 5 | 231 | 244 | 270 | 231 |
| 69.20.3.19 - 0 | 5 | 5 | 240 | 246 | 270 | 240 |
| No response from host - 100 | 5 | 0 | 0 | 0 | 0 | 0 |
|________________________________________________|______|______|______|______|______|______|
WinMTR - 0.8. Copyleft @2000-2002 Vasile Laurentiu Stanimir ( stanimir@cr.nivis.com )


Webhostingtalk.com From Morocco : 2004/12/19 19:10 GMT
|------------------------------------------------------------------------------------------|
| WinMTR statistics |
| Host - % | Sent | Recv | Best | Avrg | Wrst | Last |
|------------------------------------------------|------|------|------|------|------|------|
| adsl-1-136-192-81.adsl2.iam.net.ma - 0 | 135 | 135 | 60 | 75 | 161 | 80 |
|ll212-2-77-126-217-212.ll212-2.iam.net.ma - 0 | 135 | 135 | 60 | 77 | 341 | 70 |
|So1-3-1-0-grtmadpe2.red.telefonica-wholesale.net - 5 | 135 | 129 | 240 | 264 | 351 | 311 |
|GE6-0-0-0-grtmadpe1.red.telefonica-wholesale.net - 3 | 135 | 131 | 241 | 268 | 560 | 261 |
|P15-0-grtparix2.red.telefonica-wholesale.net - 4 | 135 | 130 | 280 | 301 | 520 | 300 |
| 213.140.36.157 - 3 | 135 | 131 | 280 | 297 | 470 | 300 |
|telia-4-1-3-0-grtparix1.red.telefonica-wholesale.net - 6 | 135 | 128 | 270 | 297 | 531 | 290 |
| prs-bb1-pos6-1-3.telia.net - 5 | 135 | 129 | 270 | 296 | 410 | 310 |
| ldn-bb1-pos7-2-0.telia.net - 4 | 135 | 130 | 290 | 305 | 360 | 310 |
| nyk-bb1-pos0-2-0.telia.net - 3 | 135 | 130 | 360 | 384 | 681 | 380 |
| nyk-bb2-pos0-0-0.telia.net - 1 | 135 | 133 | 350 | 376 | 621 | 370 |
| ash-bb1-pos5-0-0.telia.net - 5 | 135 | 128 | 350 | 378 | 581 | 380 |
| rackspace-106764-ash-bb1.c.telia.net - 0 | 135 | 134 | 220 | 255 | 781 | 240 |
| vlan903.core3.iad1.rackspace.com - 0 | 135 | 134 | 230 | 250 | 461 | 260 |
| aggr104a.iad1.rackspace.com - 0 | 135 | 134 | 220 | 244 | 661 | 240 |
| No response from host - 100 | 135 | 0 | 0 | 0 | 0 | 0 |
|________________________________________________|______|______|______|______|______|______|
WinMTR - 0.8. Copyleft @2000-2002 Vasile Laurentiu Stanimir ( stanimir@cr.nivis.com )


Webhostingtalk.com From Morocco : 2004/12/19 19:45 GMT
|------------------------------------------------------------------------------------------|
| WinMTR statistics |
| Host - % | Sent | Recv | Best | Avrg | Wrst | Last |
|------------------------------------------------|------|------|------|------|------|------|
| adsl-1-136-192-81.adsl2.iam.net.ma - 0 | 627 | 626 | 60 | 93 | 1713 | 80 |
|ll212-2-77-126-217-212.ll212-2.iam.net.ma - 0 | 626 | 626 | 60 | 95 | 1683 | 80 |
|So1-3-1-0-grtmadpe2.red.telefonica-wholesale.net - 3 | 626 | 613 | 240 | 284 | 1932 | 261 |
|GE6-0-0-0-grtmadpe1.red.telefonica-wholesale.net - 3 | 626 | 610 | 240 | 284 | 1892 | 261 |
|P15-0-grtparix2.red.telefonica-wholesale.net - 2 | 626 | 615 | 260 | 318 | 1852 | 290 |
|GE2-1-0-0-grtparix1.red.telefonica-wholesale.net - 4 | 626 | 606 | 270 | 317 | 1973 | 290 |
|telia-4-1-3-0-grtparix1.red.telefonica-wholesale.net - 3 | 626 | 609 | 270 | 315 | 1933 | 340 |
| prs-bb1-pos6-1-3.telia.net - 2 | 626 | 614 | 270 | 316 | 1853 | 290 |
| ldn-bb1-pos7-2-0.telia.net - 6 | 626 | 593 | 270 | 320 | 1813 | 301 |
| nyk-bb1-pos0-2-0.telia.net - 3 | 626 | 608 | 350 | 400 | 2173 | 371 |
| nyk-bb2-pos0-0-0.telia.net - 3 | 626 | 612 | 350 | 396 | 2143 | 371 |
| ash-bb1-pos5-0-0.telia.net - 3 | 626 | 610 | 350 | 399 | 2103 | 361 |
| rackspace-106764-ash-bb1.c.telia.net - 0 | 626 | 626 | 220 | 271 | 2033 | 240 |
| vlan903.core3.iad1.rackspace.com - 0 | 626 | 625 | 220 | 267 | 1993 | 230 |
| aggr104a.iad1.rackspace.com - 0 | 626 | 625 | 220 | 261 | 1963 | 240 |
| 69.20.37.114 - 64 | 626 | 228 | 220 | 239 | 400 | 240 |
|________________________________________________|______|______|______|______|______|______|
WinMTR - 0.8. Copyleft @2000-2002 Vasile Laurentiu Stanimir ( stanimir@cr.nivis.com )



Webhostingtalk.com From Morocco : 2004/12/19 19:50 GMT
There seems to have been a slight problem with the WebHostingTalk Forums database.
Please try again by pressing the refresh button in your browser.
An E-Mail has been dispatched to our Technical Staff, who you can also contact if the problem persists.

We apologise for any inconvenience.



There seems to have been a slight problem with the WebHostingTalk Forums database.
Please try again by pressing the refresh button in your browser.
An E-Mail has been dispatched to our Technical Staff, who you can also contact if the problem persists.

We apologise for any inconvenience.

<!-- Database error in vBulletin 2.3.5:

Invalid SQL: INSERT INTO search (searchid,query,dateline,querystring,showposts,userid,ipaddress) VALUES (NULL,'1=1 AND NOT (thread.forumid=\'17\' OR thread.forumid=\'7\' OR thread.forumid=\'92\' OR thread.forumid=\'40\' OR thread.forumid=\'39\' OR thread.forumid=\'62\' OR thread.forumid=\'98\' OR thread.forumid=\'38\' OR thread.forumid=\'41\' OR thread.forumid=\'100\' OR thread.forumid=\'65\' OR thread.forumid=\'32\' OR thread.forumid=\'57\' OR thread.forumid=\'50\' OR thread.forumid=\'52\' OR thread.forumid=\'53\') AND thread.lastpost>=1103464969 AND thread.open<>10',1103485675,'',0,49513,'81.192.136.223')
mysql error: Server shutdown in progress

mysql error number: 1053

Date: Sunday 19th of December 2004 02:48:04 PM
Script: http://www.webhostingtalk.com/search.php?s=&action=getnew
Referer:
-->

John D
12-19-2004, 03:56 PM
Hey,
Just noticed the online guests is up over 2000 right now.
Is there a DDoS going on?

Torith
12-19-2004, 04:00 PM
I think so.... the banner ads are not showing for me now. The site loads slow as heck. :bawling:

Torith
12-19-2004, 04:02 PM
ya WHT is being Ddosed again :mad:

RofyHost
12-19-2004, 04:02 PM
banner ads back online for me here
edit: problem back again :(

sites load is pretty fast for me, but sometimes it hungs

Blankwire
12-19-2004, 04:08 PM
Originally posted by rofyhost
banner ads back online for me here
edit: problem back again :(

sites load is pretty fast for me, but sometimes it hungs
Same for me.

Rob83
12-19-2004, 05:23 PM
Thank God.

Recently I have decided to run my own resolver instead of using my ISP's DNS. While on my ISP's DNS I couldn't access WHT and using my resolver I couldn't either. So I knew it wasn't me.. but I still had my doubts lol.

isalex
12-19-2004, 05:43 PM
over 7500 guests :uzi:

ilyash
12-19-2004, 05:45 PM
i had trouble getting on today also..
damn ddosers..

focus on something else..

Eleven2 Hosting
12-20-2004, 01:18 AM
WHT seems messed up, no ads loading or anything, is kane doing something?

Artashes
12-20-2004, 01:30 AM
Not only ads, for me: corrupted template at first, then it went offline for about 20-25 minutes.

Eleven2 Hosting
12-20-2004, 01:31 AM
Yea, that seems like the work of Kane

dollar
12-20-2004, 02:22 AM
DDoS just seems pointless to me =/

Hands-on Mark
12-20-2004, 02:25 AM
It is pointless.

systemadmin
12-20-2004, 06:32 AM
Yeah.. the guest login is no more working. So anyone who wants to access WHT has to login to be able to access it.

Bully
12-20-2004, 10:17 PM
Is everyone else getting load time problems? sometimes the site wont load, others it does but really slow, other times its fine, I get a few Database errors too,

is it just me?

jasong
12-20-2004, 10:19 PM
I've been having problems too!
I've gotten the "there seems to be trouble with our database" errors, I've had times where you have to refresh the page twice before it loads, and sometimes its just really slow.

I thought it was just me.

Gee-Shady
12-20-2004, 10:22 PM
I havent been getting anything all day, but thats probably because im new. The problem might be in the server, WHT is such a popular site, all these people going on one server is bound to ermm.. "duck" it up. Now i knw some of you will just say, "y dont we just buy another server lol?" think of how much that would cost.

Mooecow
12-20-2004, 10:41 PM
heh i think they have enough to add another server. But seriously whats up with the lag O_o . My ping spikes once it reaches rackspace:eek:

[NL]PeterT
12-20-2004, 11:10 PM
It seriously took me about 15 mins to get to this thread and make this post (although I expect it'll take another 5mins for it to be actually posted...)

Jeremy Johnstone
12-20-2004, 11:24 PM
Pretty obvious that it's yet another DDoS attack. Any time you see the forum with over 2,000 guests online you can pretty much be sure that the site is getting attacked and will be slow as heck.

ldcdc
12-21-2004, 01:07 AM
Pretty obvious that it's yet another DDoS attack.indeed. WHT was slow for me every now and then these days. It's been basically down for some 2 hours I think. I've just been able to access it now. :(

Blankwire
12-21-2004, 01:09 AM
Originally posted by Jeremy Johnstone
Pretty obvious that it's yet another DDoS attack. Any time you see the forum with over 2,000 guests online you can pretty much be sure that the site is getting attacked and will be slow as heck.
That what, 3 times in one month?

AFMichael
12-21-2004, 01:16 AM
Seems like kane is back at it again?

Kimmikat
12-21-2004, 01:16 AM
Some is mad at WHT with all these annoying DDoSs.

Artashes
12-21-2004, 01:17 AM
Wow, over 2 hour long downtime. Second day in a row.

Amish_Geek
12-21-2004, 01:18 AM
Looks like they've limited the forum to registered members only.

Artashes
12-21-2004, 01:50 AM
Originally posted by amish_geek
Looks like they've limited the forum to registered members only.
How do you know that?

CrazyTech
12-21-2004, 01:56 AM
The thing is, to him this thread and others like it make it 'pointful' right now.

Kerry Jones
12-21-2004, 02:01 AM
How do you know that?

I just logged out/in and I got a command prompt to view this topic by logging in to view it.

cyansmoker
12-22-2004, 04:38 AM
Wow. Apparently, having been less active lately, I missed a whole lot of excitement. Who the heck is this Kane?

Grrr DDoS attacks...Got one myself a couple days ago.

dollar
12-22-2004, 04:39 AM
kane: http://www.webhostingtalk.com/search.php?s=&action=showresults&searchid=3178517&sortby=lastpost&sortorder=descending