Massive DDoS attack affects Afrihost, other networks

technojunky said:
@AfriMan is this affecting emails as well (hosted with Afrihost) cant log on to Client zone to view anything there....
Click to expand...

It would probably affect emails. For the most part the attacks are aimed at Liquid Telecom's network, but that would also affect traffic leaving our data centre for overseas. It may also affect some management tools working with things like DNS. I might have to check with one of my more learned colleagues.

It's really difficult to say, but I think when the attack is mitigated, we should see services returning to normal.
 
Thor said:
Really curious as to what the end goal is - a DDoS is almost always a side project of the main intend so my guess is 2 months from now there is going to be an influx of leaked DBs and stuff floating around - this feels like a proper attack with intend.
Click to expand...

It's really difficult to speculate but it's important to remember that a DDoS is not a security compromise. It's simply a flood of network traffic that bogs down all the network management systems. However, information on the network should remain secure.
 
Emjay said:
Is your network being used to attack another?

www.moneyweb.co.za

Sabric says SA banks are under sustained DDoS attack

'Entities from several other countries are also being targeted'.
www.moneyweb.co.za www.moneyweb.co.za

Something is afoot. I know of another massive corporate that was attacked a few days ago.
Click to expand...


"Threat intelligence which has surfaced has revealed that this is a multi-jurisdictional attack with entities from several countries being targeted and should therefore not be viewed as a targeted attack on South African companies only,” it said. "

Which entities?
 
Emjay said:
Something is afoot. I know of another massive corporate that was attacked a few days ago.
Click to expand...

As mentioned in another thread - my network got nailed last week Monday evening (ISP - RSAWeb mitigated the issue very quickly). These attacks have been going on for longer than reported, and are more widespread than we think.
 
eg2505 said:
thats also a possibility,
what also scares me is something private like a crypto exchange primarily dealing with SA.
or a major bank like FNB gets hacked into.

I mean these DDOS have been getting stronger and stronger lately,
somebody has got a very effective weapon in their possession, and is begging to use it.

one can only hope its just some kids playing around, and not some nefarious actor
testing systems out for something worse that they are planning.
Click to expand...

Sadly, launching a DDoS is not very complex. However, the networking companies like Cisco etc are getting smarter at ways to mitigate the effects and identify the sources of traffic. We should generally be able to keep the network up and working as best as we can until it's over. Thankfully we've never seen these attacks happen for longer than a day or so at absolute maximum - usually only a few hours.
 
nazmo said:
Good luck Afrihost. This was the first time I had reduced performance with Afrihost Fibre since i got it in April, and its an external force.
Click to expand...

Thanks for the vote of confidence.

PLease spare a thought for the network team who have been going at this since 3pm yesterday and are probably pretty tired (but still doing the things to make the internet happen).
 
Just thinking back in the days when 4 meg lines were the ish and all, i'm sure ISPs also had little international links. A DDoS attack wouldn't have required much firepower to take us completely out
 
So where is all the rage? When Cool Ideas was experiencing DDOS attacks everyone raged and jumped ship, so why isn't it happening this time?
 
Been attacked by bots on our website too over the last few days. Around 1200 bot users just indexing our site. Blocked all China ip addresses and has returned to normal levels.
 
kianm said:
Just thinking back in the days when 4 meg lines were the ish and all, i'm sure ISPs also had little international links. A DDoS attack wouldn't have required much firepower to take us completely out
Click to expand...

Just imagine the damage a 1Gbps line with a slaved bot can do - especially now that many online devices can be slaved like game consoles, mobile devices, etc.

Definitely a more potentially dangerous environment, but we also know a lot more and have more advanced tools like AI, etc to help. So I think we're mostly winning at the end.
 
AfriMan said:
It's really difficult to speculate but it's important to remember that a DDoS is not a security compromise. It's simply a flood of network traffic that bogs down all the network management systems. However, information on the network should remain secure.
Click to expand...
Correction...
The flood of network traffic causes resource exhaustion in the network equipment, in other words, so many TCP sockets are opened there's simply no more RAM to create additional sockets. The router/switch and/or its OS becomes slow and that's why
 
Thought so. No internet from Telkom via Afrihost while direct to Telkom there is internet. And no communication to us, the paying clients, from Afrihost.... Not good service.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X