WebsiteSource :-|

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Master Baiter Joined: 22 May 2009 Posts: 112

My site (also the honeypot) was hosted with WebsiteSource, since they could guarantee that DDoS attacks would be handled, and there wouldn't be any problems. Today we had a single HTTP flood (that's the near-lowest level of attack you can do on a site), the used bandwidth went up to 62.5 gigabyte, and WebsiteSource tells us to buy a dedicated server, because we are giving other customers trouble.

DDoS attack-proof? Not really Neutral

So I'm asking them for a refund now... This is serious nonsense.

Not quite a Newb Joined: 24 May 2009 Posts: 60

Try to get a log over connections from host..

Master Baiter Joined: 22 May 2009 Posts: 112

kallepromp wrote:

Try to get a log over connections from host..

No use really. I know it's a botnet, and I kinda suspect whose botnet it is.

Not quite a Newb Joined: 24 May 2009 Posts: 60

Well, then throw in the towels and move to another host.. Wink

Baiting Guru Joined: 31 Jan 2007 Posts: 12237

justme wrote:

So I'm asking them for a refund now...

I would also ask for a quality Spanish hooker, and a case of Guinness. Wink

Posted: Fri May 29, 2009 5:44 am

I'm so sorry justme Sad

Master Baiter Joined: 22 May 2009 Posts: 112

kallepromp wrote:

Well, then throw in the towels and move to another host.. Wink

I have already asked for a refund, and they will refund it fully. The point is, it's very hard to find a DDoS-proof (and HTTP-flood-proof) host that's actually affordable. I know HR-Developments does a very good job on mitigating attacks, but they are $20/month Sad

They recommended me SquareSpace though, which is clouded hosting.

Posted: Fri May 29, 2009 8:48 am

If you know the IP address(es) where the attack is coming from, and you have full FTP access to the place where you dump your web files, add or edit a files called .htaccess and add those IP's to the DENY FROM statement
(example: Deny From 12.226.242.136 24.82.164.148 24.233.221.185 etc...

That should make the server drop all communication with those IP's, no longer eating up your bandwidth (been there, done that).

The IP's I'm quoting here in my example are real spam addresses so I'm leaving them there for the world to see...

Posted: Fri May 29, 2009 9:54 am

^^ If it is a botnet causing the flood it would mean adding maybe tens of thousands of IP addresses, not really workable I guess.

Master Baiter Joined: 22 May 2009 Posts: 112

wokabo wrote:

If you know the IP address(es) where the attack is coming from, and you have full FTP access to the place where you dump your web files, add or edit a files called .htaccess and add those IP's to the DENY FROM statement
(example: Deny From 12.226.242.136 24.82.164.148 24.233.221.185 etc...

That should make the server drop all communication with those IP's, no longer eating up your bandwidth (been there, done that).

The IP's I'm quoting here in my example are real spam addresses so I'm leaving them there for the world to see...

They would still connect and cause server load... that won't help a lot. They would have to be blocked at hardware level.

Also, I''m currently looking into cloud hosting (recommended by WebsiteSource customer support) and HR-Dev... but HR-Dev is too expensive and I doubt cloud hosting can take/mitigate a HTTP flood.

Posted: Fri May 29, 2009 8:41 pm

@ Pastor Frank - Why a Spannish hooker? I can understand the Guiness (though I prefer Shiner Bock).

Posted: Fri May 29, 2009 9:21 pm

Cloud hosting could help you - try the Amazon Web Services offering - it'll take you a bit of work to get set up, but $0.11 per gigabyte means even 65 gigs will be $7-odd - but they may give up earlier once they realise your site is un DDOS-able thanks to the monsterous level of redundancy. You could even cloudfront it ($0.17/GB) which will mean every connection will get directed to a local, speed optimised server, so your site will never go down, so the DDoS becomes a hollow and useless threat.

The AWS stuff is all pay as you go, it's an easy and very cheap win. I even resell AWS Cloudfront privately for video streaming as it's so blinking fast and priced very attractively.

Master Baiter Joined: 22 May 2009 Posts: 112

But if you pay per gigabyte that would mean that people could easily drive up your cost by just hitting it 24/7?
Also, I don't think the co-admin and funding guy is really ready to have a variable fee. He is jobless after all.