{"id":43692,"date":"2018-08-19T15:35:26","date_gmt":"2018-08-19T19:35:26","guid":{"rendered":"http:\/\/shamusyoung.com\/twentysidedtale\/?p=43692"},"modified":"2018-08-19T15:35:26","modified_gmt":"2018-08-19T19:35:26","slug":"ddosed","status":"publish","type":"post","link":"https:\/\/www.shamusyoung.com\/twentysidedtale\/?p=43692","title":{"rendered":"DDOS’ed"},"content":{"rendered":"

Last night I uploaded some updates to the site theme. A little while later, the site went down. On the control panel I could see my CPU and process usage were both pegged at 100%. I naturally assumed the outage was related to the changes I’d just made. I spent hours fussing with things, trying to figure out what I’d done wrong. I finally reverted everything and discovered that the problem persisted.<\/p>\n

I reached out to support and they determined I was experiencing a DDOS attack, and the site update was unrelated. Lots of unrelated IP addresses from around the world were all hammering away at the WordPress login script, probably trying to brute-force using common passwords. It’s a hopeless effort on their part. My blog password is in excess of 128 bits, which means the sun will burn out before this botnet cracks it. Still, they managed to overwhelm the site and take it down. So I guess technically this wasn’t really a DDOS. It was a hack attempt that accidentally became a DDOS due to my site being a little undermatched for this particular botnet.<\/p>\n

I’m reasonably sure this DDOS isn’t the first. You might remember my adventures with 1 & 1 Hosting<\/a>. What I think was happening is I was getting slammed with this same botnet. Instead of notifying me or investigating, 1 & 1 just took my site down until the bots gave up and left. <\/p>\n

I’m experimenting with a cloud service to distribute the load. This is supposedly a really good defense against these sorts of things. I don’t know. I guess we’ll see if \/ when this happens again.<\/p>\n","protected":false},"excerpt":{"rendered":"

Last night I uploaded some updates to the site theme. A little while later, the site went down. On the control panel I could see my CPU and process usage were both pegged at 100%. I naturally assumed the outage was related to the changes I’d just made. I spent hours fussing with things, trying […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[111],"tags":[],"class_list":["post-43692","post","type-post","status-publish","format-standard","hentry","category-notices"],"_links":{"self":[{"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=\/wp\/v2\/posts\/43692","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=43692"}],"version-history":[{"count":2,"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=\/wp\/v2\/posts\/43692\/revisions"}],"predecessor-version":[{"id":43695,"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=\/wp\/v2\/posts\/43692\/revisions\/43695"}],"wp:attachment":[{"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=43692"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=43692"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=43692"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}