BitMarket.eu DDoS attacked as well

[Mahkul]

I just came back from the college to find that bitmarket.eu got down. Going through the firewall and apache2 logs clearly indicates someone performed an attack. I am going to examine the logs closely within the next hour or so. Also, the bitcoin.org website was coming and going today. Are we under some general attack against Bitcoin related websites?

[1713937402]

1713937402

[1713937402]

1713937402

[1713937402]

1713937402

[1713937402]

1713937402

[1713937402]

1713937402

[Mahkul]

Sorry, can someone move this topic to the relevant section? Thanks

[Mahkul]

OKay, everything is intact. They tried to inject some code to our mysql database, but they did not succeed. The database was not compromised, the coins are safe as well.

I am going to publish the list of IPs later on. I am going to bring the server back on line once I put in some additional security measures. I didn't expect an attack that quickly.

[Mahkul]

Not that I see much interest, but the website is back up now.

[Anonymous]

Id be interested if some of the ip's that are banned are the same across all of these attacks.

Maybe someone can collect them all and see if any match....

[MagicalTux]

Be careful, if a weird russian approaches you with a ransom request.

I had a guy approach me and asking $5000 via LR, when I said no he said he'd attack again, and generated a ddos. His ddos was different from what I had before, so I'd guess lots of people are seeing in bitcoin an opportunity to make money.

I strongly recommend against doing anything those guys request, and even replying may be a bad idea, just click "spam".

[SgtSpike]

Or next time, 409 him?

"Ar har! No, my friend.  I will DDOS YOU if you don't pay ME $5000!"

[Darth Severus]

Hmm, it seems that all BTC sites should move to a DDos safe hoster like Dragonara. 

[Mahkul]

Be careful, if a weird russian approaches you with a ransom request.

I had a guy approach me and asking $5000 via LR, when I said no he said he'd attack again, and generated a ddos. His ddos was different from what I had before, so I'd guess lots of people are seeing in bitcoin an opportunity to make money.

I strongly recommend against doing anything those guys request, and even replying may be a bad idea, just click "spam".

Thanks for the info. (Un)fortunately it will be long before we even have that much there. Still, we must do something about that, but I don't think I can afford paying for a dedicated server with DDoS protection. Any idea how much that would cost per month?

[MagicalTux]

Be careful, if a weird russian approaches you with a ransom request.

I had a guy approach me and asking $5000 via LR, when I said no he said he'd attack again, and generated a ddos. His ddos was different from what I had before, so I'd guess lots of people are seeing in bitcoin an opportunity to make money.

I strongly recommend against doing anything those guys request, and even replying may be a bad idea, just click "spam".

Thanks for the info. (Un)fortunately it will be long before we even have that much there. Still, we must do something about that, but I don't think I can afford paying for a dedicated server with DDoS protection. Any idea how much that would cost per month?

Try the VPS service from Diablo-D3 (ask him on IRC, he'll show you)

[Mahkul]

Be careful, if a weird russian approaches you with a ransom request.

I had a guy approach me and asking $5000 via LR, when I said no he said he'd attack again, and generated a ddos. His ddos was different from what I had before, so I'd guess lots of people are seeing in bitcoin an opportunity to make money.

I strongly recommend against doing anything those guys request, and even replying may be a bad idea, just click "spam".

Thanks for the info. (Un)fortunately it will be long before we even have that much there. Still, we must do something about that, but I don't think I can afford paying for a dedicated server with DDoS protection. Any idea how much that would cost per month?

Try the VPS service from Diablo-D3 (ask him on IRC, he'll show you)

BitMarket is on a VPS already. I was thinking about a DS. Is mtgox on a DS?

[kiba]

Can anybody confirms that the bitcoin forum got DDOSed recently?

[Mahkul]

Can anybody confirms that the bitcoin forum got DDOSed recently?

It looked pretty much like that earlier today, but perhaps it was just heavy traffic.

[kiba]

It looked pretty much like that earlier today, but perhaps it was just heavy traffic.

There is no source to explain 1900ish users online.

[lulzplzkthx]

I was having trouble visiting the Bitcoin wiki yesterday due to "too many MySQL conections" (bitcoin.it)

So, shall we start a comprehensive list of what's been DDoS'd?

• BitMarket.eu
• MtGox.com
• Bitcoin.org
• Bitcoin.it

It appears MtGox.com is still under attack: "too many connections".
Bitcoin.it is running slowly, but not giving me the "too many connections" error from yesterday.

[cloud]

Be careful, if a weird russian approaches you with a ransom request.

I had a guy approach me and asking $5000 via LR, when I said no he said he'd attack again, and generated a ddos. His ddos was different from what I had before, so I'd guess lots of people are seeing in bitcoin an opportunity to make money.

I strongly recommend against doing anything those guys request, and even replying may be a bad idea, just click "spam".

Thanks for the info. (Un)fortunately it will be long before we even have that much there. Still, we must do something about that, but I don't think I can afford paying for a dedicated server with DDoS protection. Any idea how much that would cost per month?

Try the VPS service from Diablo-D3 (ask him on IRC, he'll show you)

BitMarket is on a VPS already. I was thinking about a DS. Is mtgox on a DS?

Yes, from what I read it's on 4 Dedicated Servers and it's right now behind Black Lotus apparently.

Black Lotus prices start from 1000 dollars a month from what I read on their website.

I recommend if you are short on money to maybe sell some shares on the bitcoin stock exchange or start a bitcoin donation drive of some sort so you can get the money to keep the site up and running.

[idev]

Seems as if MtGox is still getting hammered

[Vasco]

This is standard fare for any popular forum or website, especially when money is involved.

Pretty much all niches get hit, legal, illegal, and inbetween.

Gambling sites, pharmaceutical sites, porn sites, carding forums and dumps/cvv vending websites, big bank websites, ALL get hit with DDoS and DoS attacks quite regularly.

It's just a strongarm tactic of trying to extort funds, and those with the most bandwidth usually win.

It is important to understand the difference between DoS attacks and DDoS attacks:

DoS - denial of service - This method of attack is conducted by using a single machine to exploit a vulnerability in the infrastructure or software of a web server, causing the site to go offline. This can be prevented by proper software and server configurations.

DDoS - distributed denial of service - This method of attack is conducted using dozens, hundreds, sometimes thousands of infected machines are flooding a site with useless traffic, overwhelming its resources and taking it offline. This attack cannot be prevented by proper software and server configurations. These botnets are usually rented, but are sometimes owned by the attacker directly. This result is usually a case of those with the most bandwidth will win. Good hardware load balancers can fend of these types of attack, especially in conjunction with a hosting company that specializes in hosting sites targeted for DDoS attacks.

Any small to medium sized website will not be able to fend off a large DDoS attack without the proper equipment and resources.

We should just look at these attacks as a clear sign that BTC is here to stay, and is considered valuable enough for criminal elements to attempt extortion on site owners.

Large site owners just need to step up their game and grow as fast as Bitcoin, or at least try to keep up.  

It's not easy, but it will be fun, and definitely interesting to see how these Bitcoin cyber wars play out.

This is one of the main reasons why I do most of my business over instant messaging and e-mail and through this forum and IRC. Unless an attacker takes out multiple large networks, they won't be able to shut me down 100%, at most just inconvenience me on some avenues.

Btw, if anyone ever contacts you pretending to be me on different screen names than the ones I have listed, send me a PM immediately!!!

[Mahkul]

Just so you know, I am moving the site so it is down right now because of me, not because of an attack.

May not be back before tomorrow, though.

[Mahkul]

The site is back. We have fixed some minor problems, should be working much faster now.