Sunday, June 24, 2007

So whatta fuck happened?

Well, our ISP was hit with the most massive DDoS ever seen in the Internet; even worst than that which brought down Microsoft and Google a few years back.
Because I have been with my ISP for ages and was client #5 I do have a certain amount of latitude and are privy of data that they would otherwise would not make available. So this attack was of a proportion that could not be done by simple hackers. This was a contant attack from over 500,000 PCs around the world sending requests to the ISP. Not to one particular site ( I kindda was hoping it was US) but again this just does not happen by chance and the ISP is a pretty low profile company so this was a VERY specific targeted operation
Because the name of our domain I was contacted to see if I could shed some light in what was going on , my suggestion was to track traffic from Latin America specially Kuba
Within 2 hours they called me back that MOST of the traffic WAS coming from Latin America AND South Florida) (You guys make your own assumptions) At any rate it took 3 days for the ISP to scramble domains assign new IP addresses and built up protection to DoD levels, propagate new DNS tables etc. (If you do not undersand this .. GOOGLE is your friend)
I was fearful they would drop us as accounts they did not (I have over 150 domains with these guys and they will think twice about loosing that kindda revenue) But.. Although I am still not an alarmist regarding these things, I think THIS time WE were the target (unless there an anti Muslim site being hosted there and these attackers live in Latin America and South Florida)
But we are back.. not worse for wear but I just did not have a confy Friday night having gone to bed at 6AM on Saturday.
So, whoever did it . Kudos it was kindda cool and on the cyberfield I LOVE a challenge but you left way too many breadcrumbs and you are gonna be in a lotta pain!
So that’s the way it was June 21 ~ 23 2007 !

10 Comments:

Charlie Bravo said...

As I said, what doesn't kill us makes us stronger. We are back.

Sunday, June 24, 2007 5:33:00 AM  
Agustin Farinas said...

Charlie,
the news that some of your data reveals does not surprise me. There are enough Castro supporters lurking in South Florida to make one's skin crawl. Just take a peek at Cuaderno de Cuba by Armengol blog or Rui Ferreira's blog, read the comments there and you can see for yourself. As far as Cuba's cyber attacks are concerned, you should take that as a badge of honor to confirm that the work you are doing must irritate someone. As my mother always says: al que le pica es porque aji come!.
I hope you can wreck some kind of vengeance upon them. I am happy and glad to see your back again! Keep hitting them where it counts!

Sunday, June 24, 2007 9:04:00 AM  
Charlie Bravo said...

Agustin, they would wish that what came unto them was Armaggedon instead of Charlie Bravo and KillCastro....

Sunday, June 24, 2007 11:29:00 AM  
KillCastro said...

Sometime the most VOCAL anti-KaSStrists are in fact KaSStro supporters! Where elese but in Miami could a nest of rats like Radio-Miami.com and its slimiest of directors Max Lesnik survive!?
Also in all honesty it is known that KaSStro has dial up connections to providers in Miami who have NO clue they are servicing the BEAST when they get their $15.95 a month.
BTW - a LOT of these attackers were BOTS . In other words someone may have a virus in their PC and was a participant in the attack without even knowing it .. so check your PC these pricks may be stealing YOUR PC and bandwidth to to their bidding.

Sunday, June 24, 2007 11:39:00 AM  
Vana said...

I want to welcome you guys back, am glad this site is ok, and KC, how do I check my pc? I'm scared

Sunday, June 24, 2007 12:51:00 PM  
KillCastro said...

Vana :
Get a good antivirus anti malware program.
I always recoment AVG (http://www.grisoft.com) it is cheap and I have never had a single infection using it.
Keep away from stuff like Norton or McAfee antivirus they are total junk that will cause more prblems than they solve.

Sunday, June 24, 2007 2:35:00 PM  
Vana said...

KC
Thank you for your prompt answer, I will look into grisoft.com, again thank you

Sunday, June 24, 2007 2:45:00 PM  
Matt said...

"Sometime the most VOCAL anti-KaSStrists are in fact KaSStro supporters!" I've read of this pehnomenon before. It took three days, eh? I can imagine the need to change after 500,000+ PCs come after the ISP. Jeez, you guys must have pissed off some people! Kudos.

Sunday, June 24, 2007 8:14:00 PM  
rsnlk said...

I usually read this blog, and I suspect something tried to hijack my computer. It took three different programs to get rid of it. For what it's worth

Monday, June 25, 2007 8:21:00 AM  
Charlie Bravo said...

rsnlk, welcome to our comments' section.... I hope that everything is working fine now.

Monday, June 25, 2007 10:17:00 AM  

Post a Comment

<< Home