Just to keep everyone in the loop: there have been four DDOS attacks on the portal
recently, two against just port 443 and late last night (UK time) two simultaneous attacks
against 443 and 25.
The first one I don't think anyone noticed (at least nothing was mentioned here), it
was during the day and we mitigated it fairly quickly.
The second was more sustained and took longer to mitigate.
Last nights was the worst with our webserver and mx hosts targeted.
We actively monitor everything here, and got woken up with a text message alert last night
much to my wife's dismay and spent a bleary eyed couple of hours filtering the
attack.
I have no idea why anyone is targeting the portal, nor who is behind it - as per your
standard DDOS the attacks they mainly came from compromised PCs on the end of home DSL
lines.
@Brian - can you confirm your replicated db is still in sync as I took the portal down for
a while to stop the return traffic.
Regards
Chris
G1FEF
On 14 Apr 2017, at 23:13, Brian Kantor
<Brian(a)UCSD.Edu> wrote:
(Please trim inclusions from previous messages)
_______________________________________________
The portal has apparently crashed. I have no way to remotely
restart it, so it'll probably be down all night until Chris
wakes up and can take a look at it.
- Brian
_________________________________________
44Net mailing list
44Net(a)hamradio.ucsd.edu
http://hamradio.ucsd.edu/mailman/listinfo/44net