Please login or register. December 15, 2019, 09:51:34 PM

Author Topic: Denial of Service attack  (Read 3598 times)

0 Members and 1 Guest are viewing this topic.

John R Peck

  • Administrator
  • Senior Member
  • *****
  • Posts: 134
  • Karma: +0/-0
Denial of Service attack
« on: June 10, 2013, 01:44:47 AM »
We are very sorry for the total loss of sound and vision during our program
on the afternoon of June 9th - we hope it didn't spoil your enjoyment too much  :o

At first it appeared we were the subject of some sort of bot-launched DoS attack,
with access to other websites on this server being blocked out by all the rootvg
traffic load - so the plug was pulled while we investigated that.

Our automatic "blockip" process will have blocked IP addresses that continued
to attempt connections, and we have now also manually and permanently blocked
those addresses that were just racking up the timeouts in the logs previously.  

It seems now that it was some kind of issue with the forum software and browsers
where windows on this site had been left open - mostly "keepalive" traffic every
20 minutes from each of over a thousand IPs at the time. 

SO PLEASE CLOSE YOUR BROWSER WINDOW/TAB WHEN YOU'RE DONE !
« Last Edit: June 15, 2013, 01:26:46 AM by John R Peck »

John R Peck

  • Administrator
  • Senior Member
  • *****
  • Posts: 134
  • Karma: +0/-0
Re: Denial of Service attack
« Reply #1 on: June 21, 2013, 01:26:04 AM »
We have moved ROOTVG to a new server as of 00:26 GMT June 21st.

DNS caching may mean that the new IP address will not be picked up by some for days.
Attempts to access the former IP using the rootvg name will redirect to the default page
where we have re-direction buttons to the various sites served by the former server
- including a ROOTVG button now pointing to the new IP address by address
to get you here if DNS has failed you :o

This action has been taken to isolate the traffic problems we have been experiencing
lately that affected the other sites on the former server. 

You should see no changes beyond the IP address, so please report anything amiss.