Bitcoin Forum
November 01, 2024, 02:25:22 PM *
News: Bitcoin Pumpkin Carving Contest
 
   Home   Help Search Login Register More  
Pages: [1] 2 »  All
  Print  
Author Topic: BitMarket.eu DDoS attacked as well  (Read 4394 times)
Mahkul (OP)
Sr. Member
****
Offline Offline

Activity: 434
Merit: 251


Every saint has a past. Every sinner has a future.


View Profile
May 03, 2011, 02:09:29 PM
 #1

I just came back from the college to find that bitmarket.eu got down. Going through the firewall and apache2 logs clearly indicates someone performed an attack. I am going to examine the logs closely within the next hour or so. Also, the bitcoin.org website was coming and going today. Are we under some general attack against Bitcoin related websites?
Mahkul (OP)
Sr. Member
****
Offline Offline

Activity: 434
Merit: 251


Every saint has a past. Every sinner has a future.


View Profile
May 03, 2011, 02:17:30 PM
 #2

Sorry, can someone move this topic to the relevant section? Thanks
Mahkul (OP)
Sr. Member
****
Offline Offline

Activity: 434
Merit: 251


Every saint has a past. Every sinner has a future.


View Profile
May 03, 2011, 03:19:03 PM
 #3

OKay, everything is intact. They tried to inject some code to our mysql database, but they did not succeed. The database was not compromised, the coins are safe as well.

I am going to publish the list of IPs later on. I am going to bring the server back on line once I put in some additional security measures. I didn't expect an attack that quickly.
Mahkul (OP)
Sr. Member
****
Offline Offline

Activity: 434
Merit: 251


Every saint has a past. Every sinner has a future.


View Profile
May 03, 2011, 04:13:10 PM
 #4

Not that I see much interest, but the website is back up now.
Anonymous
Guest

May 03, 2011, 04:19:48 PM
 #5

Id be interested if some of the ip's that are banned are the same across all of these attacks.

Maybe someone can collect them all and see if any match....
MagicalTux
VIP
Hero Member
*
Offline Offline

Activity: 608
Merit: 501


-


View Profile
May 03, 2011, 04:33:10 PM
 #6

Be careful, if a weird russian approaches you with a ransom request.

I had a guy approach me and asking $5000 via LR, when I said no he said he'd attack again, and generated a ddos. His ddos was different from what I had before, so I'd guess lots of people are seeing in bitcoin an opportunity to make money.

I strongly recommend against doing anything those guys request, and even replying may be a bad idea, just click "spam".
SgtSpike
Legendary
*
Offline Offline

Activity: 1400
Merit: 1005



View Profile
May 03, 2011, 04:35:00 PM
 #7

Or next time, 409 him?

"Ar har! No, my friend.  I will DDOS YOU if you don't pay ME $5000!"
Darth Severus
Newbie
*
Offline Offline

Activity: 28
Merit: 0


View Profile
May 03, 2011, 04:39:37 PM
 #8

Hmm, it seems that all BTC sites should move to a DDos safe hoster like Dragonara.  Angry
Mahkul (OP)
Sr. Member
****
Offline Offline

Activity: 434
Merit: 251


Every saint has a past. Every sinner has a future.


View Profile
May 03, 2011, 04:46:09 PM
 #9

Be careful, if a weird russian approaches you with a ransom request.

I had a guy approach me and asking $5000 via LR, when I said no he said he'd attack again, and generated a ddos. His ddos was different from what I had before, so I'd guess lots of people are seeing in bitcoin an opportunity to make money.

I strongly recommend against doing anything those guys request, and even replying may be a bad idea, just click "spam".

Thanks for the info. (Un)fortunately it will be long before we even have that much there. Still, we must do something about that, but I don't think I can afford paying for a dedicated server with DDoS protection. Any idea how much that would cost per month?
MagicalTux
VIP
Hero Member
*
Offline Offline

Activity: 608
Merit: 501


-


View Profile
May 03, 2011, 04:52:17 PM
 #10

Be careful, if a weird russian approaches you with a ransom request.

I had a guy approach me and asking $5000 via LR, when I said no he said he'd attack again, and generated a ddos. His ddos was different from what I had before, so I'd guess lots of people are seeing in bitcoin an opportunity to make money.

I strongly recommend against doing anything those guys request, and even replying may be a bad idea, just click "spam".

Thanks for the info. (Un)fortunately it will be long before we even have that much there. Still, we must do something about that, but I don't think I can afford paying for a dedicated server with DDoS protection. Any idea how much that would cost per month?

Try the VPS service from Diablo-D3 (ask him on IRC, he'll show you)
Mahkul (OP)
Sr. Member
****
Offline Offline

Activity: 434
Merit: 251


Every saint has a past. Every sinner has a future.


View Profile
May 03, 2011, 05:00:21 PM
 #11

Be careful, if a weird russian approaches you with a ransom request.

I had a guy approach me and asking $5000 via LR, when I said no he said he'd attack again, and generated a ddos. His ddos was different from what I had before, so I'd guess lots of people are seeing in bitcoin an opportunity to make money.

I strongly recommend against doing anything those guys request, and even replying may be a bad idea, just click "spam".

Thanks for the info. (Un)fortunately it will be long before we even have that much there. Still, we must do something about that, but I don't think I can afford paying for a dedicated server with DDoS protection. Any idea how much that would cost per month?

Try the VPS service from Diablo-D3 (ask him on IRC, he'll show you)

BitMarket is on a VPS already. I was thinking about a DS. Is mtgox on a DS?
kiba
Legendary
*
Offline Offline

Activity: 980
Merit: 1020


View Profile
May 03, 2011, 05:09:42 PM
 #12

Can anybody confirms that the bitcoin forum got DDOSed recently?

Mahkul (OP)
Sr. Member
****
Offline Offline

Activity: 434
Merit: 251


Every saint has a past. Every sinner has a future.


View Profile
May 03, 2011, 05:21:00 PM
 #13

Can anybody confirms that the bitcoin forum got DDOSed recently?

It looked pretty much like that earlier today, but perhaps it was just heavy traffic.
kiba
Legendary
*
Offline Offline

Activity: 980
Merit: 1020


View Profile
May 03, 2011, 05:23:54 PM
 #14

It looked pretty much like that earlier today, but perhaps it was just heavy traffic.

There is no source to explain 1900ish users online.

lulzplzkthx
Sr. Member
****
Offline Offline

Activity: 322
Merit: 251



View Profile WWW
May 03, 2011, 05:41:51 PM
 #15

I was having trouble visiting the Bitcoin wiki yesterday due to "too many MySQL conections" (bitcoin.it)

So, shall we start a comprehensive list of what's been DDoS'd?
  • BitMarket.eu
  • MtGox.com
  • Bitcoin.org
  • Bitcoin.it

It appears MtGox.com is still under attack: "too many connections".
Bitcoin.it is running slowly, but not giving me the "too many connections" error from yesterday.

cloud
Newbie
*
Offline Offline

Activity: 7
Merit: 0


View Profile
May 03, 2011, 08:08:55 PM
 #16

Be careful, if a weird russian approaches you with a ransom request.

I had a guy approach me and asking $5000 via LR, when I said no he said he'd attack again, and generated a ddos. His ddos was different from what I had before, so I'd guess lots of people are seeing in bitcoin an opportunity to make money.

I strongly recommend against doing anything those guys request, and even replying may be a bad idea, just click "spam".

Thanks for the info. (Un)fortunately it will be long before we even have that much there. Still, we must do something about that, but I don't think I can afford paying for a dedicated server with DDoS protection. Any idea how much that would cost per month?

Try the VPS service from Diablo-D3 (ask him on IRC, he'll show you)

BitMarket is on a VPS already. I was thinking about a DS. Is mtgox on a DS?

Yes, from what I read it's on 4 Dedicated Servers and it's right now behind Black Lotus apparently.

Black Lotus prices start from 1000 dollars a month from what I read on their website.

I recommend if you are short on money to maybe sell some shares on the bitcoin stock exchange or start a bitcoin donation drive of some sort so you can get the money to keep the site up and running.
idev
Hero Member
*****
Offline Offline

Activity: 860
Merit: 1004


BTC OG and designer of the BitcoinMarket.com logo


View Profile
May 03, 2011, 08:12:53 PM
 #17

Seems as if MtGox is still getting hammered Cry
Vasco
Donator
Full Member
*
Offline Offline

Activity: 213
Merit: 100

SEIZED by Gunthar


View Profile
May 03, 2011, 08:40:36 PM
 #18

This is standard fare for any popular forum or website, especially when money is involved.

Pretty much all niches get hit, legal, illegal, and inbetween.

Gambling sites, pharmaceutical sites, porn sites, carding forums and dumps/cvv vending websites, big bank websites, ALL get hit with DDoS and DoS attacks quite regularly.

It's just a strongarm tactic of trying to extort funds, and those with the most bandwidth usually win.

It is important to understand the difference between DoS attacks and DDoS attacks:

DoS - denial of service - This method of attack is conducted by using a single machine to exploit a vulnerability in the infrastructure or software of a web server, causing the site to go offline. This can be prevented by proper software and server configurations.

DDoS - distributed denial of service - This method of attack is conducted using dozens, hundreds, sometimes thousands of infected machines are flooding a site with useless traffic, overwhelming its resources and taking it offline. This attack cannot be prevented by proper software and server configurations. These botnets are usually rented, but are sometimes owned by the attacker directly. This result is usually a case of those with the most bandwidth will win. Good hardware load balancers can fend of these types of attack, especially in conjunction with a hosting company that specializes in hosting sites targeted for DDoS attacks.

Any small to medium sized website will not be able to fend off a large DDoS attack without the proper equipment and resources.

We should just look at these attacks as a clear sign that BTC is here to stay, and is considered valuable enough for criminal elements to attempt extortion on site owners.

Large site owners just need to step up their game and grow as fast as Bitcoin, or at least try to keep up.  Tongue

It's not easy, but it will be fun, and definitely interesting to see how these Bitcoin cyber wars play out.

This is one of the main reasons why I do most of my business over instant messaging and e-mail and through this forum and IRC. Unless an attacker takes out multiple large networks, they won't be able to shut me down 100%, at most just inconvenience me on some avenues.

Btw, if anyone ever contacts you pretending to be me on different screen names than the ones I have listed, send me a PM immediately!!!

Mahkul (OP)
Sr. Member
****
Offline Offline

Activity: 434
Merit: 251


Every saint has a past. Every sinner has a future.


View Profile
May 03, 2011, 08:47:10 PM
 #19

Just so you know, I am moving the site so it is down right now because of me, not because of an attack.

May not be back before tomorrow, though.
Mahkul (OP)
Sr. Member
****
Offline Offline

Activity: 434
Merit: 251


Every saint has a past. Every sinner has a future.


View Profile
May 03, 2011, 10:34:18 PM
 #20

The site is back. We have fixed some minor problems, should be working much faster now.
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!