Attaque DDoS: petit aperçu
Le site d’un client en Russie, Women Journal, numéro 1 des sites féminins russe (le aufeminin russe) a été attaqué la semaine dernière par une grosse attaque DDoS (Distributed Denial of Service). En résumé, le site est bombardé de requêtes qui viennent de plusieurs adresses IP.
Concrètement, qu’est-ce que ça donne ? Ci-après dans la deuxième partie de la note un compte-rendu chiffré de l’attaque..
Protégez-vous correctement votre site contre ce type d’attaques ? C’est très difficile même avec des outils performants de load balancing ou de “coupage” de trafic suspect.
A priori, une attaque de ce type coûte environ 50000 USD à mettre en place contre un concurrent ou une société que vous n’aimez pas 
La guerre existe sur le web !!
| date and time | number of attacking hosts | taken action | load stress on wmj.ru (users per second) |
| 05/11/2007 06:00 | 6000 | begin to anylize incoming traffic, alerts were send to system administrator and manager | 1500 |
| 05/11/2007 10:00 | 7000 | Begin to lock subnets by IP's on Cisco router | 3000 |
| 05/11/2007 12:00 | 25000 | Secure filters on Cisco | 4700 |
| 05/11/2007 14:00 | 1 000 000 | Making 1 connection per IP on Cisco | 4700 |
| 05/11/2007 17:00 | 1 500 000 | Blocking subnets | 600 |
| 05/11/2007 19:00 | 2 000 000 | Blocking subnets | 150 |
| 05/11/2007 19:30 | 1 500 | Attack was repeled | 50 (normal state) |
| 06.11.2007 6:00 - 06.11.2007 22:00 |
1 500 | Cisco working in a high secured configuration, we're loosing traffic many users were filtered by router | 80 |
| 06/11/2007 23:00 | 1 500 000 | Blocking subnets | 4000 |
| 07/11/2007 02:00 | 6 000 000 | Blocking subnets | 5000 |
| 07/11/2007 06:00 | 6 000 000 | Blocking subnets | 3500 |
| 07/11/2007 10:00 | 6 000 000 | Blocking subnets, connecting to our provider | 280 |
| 07/11/2007 12:00 | 12 000 000 | Blocking subnets in an automatic way | 150 |
| 07/11/2007 14:00 | 12 000 000 | Leaving only Russian segment on Cisco | 50 |
| 07/11/2007 15:00 | 12 000 000 | Blocking Russian subnets | |
| 07/11/2007 17:00 | 5 000 | Cisco working in a high secured configuration, we're loosing traffic many users were filtered by router | 10 |
| 07/11/2007 19:00 | 1 000 | Attackers were stopped | 10 |
| date and time | number of attacking hosts | taken action | load stress on wmj.ru (users per second) |
| 05/11/2007 06:00 | 6000 | begin to anylize incoming traffic, alerts were send to system administrator and manager | 1500 |
| 05/11/2007 10:00 | 7000 | Begin to lock subnets by IP's on Cisco router | 3000 |
| 05/11/2007 12:00 | 25000 | Secure filters on Cisco | 4700 |
| 05/11/2007 14:00 | 1 000 000 | Making 1 connection per IP on Cisco | 4700 |
| 05/11/2007 17:00 | 1 500 000 | Blocking subnets | 600 |
| 05/11/2007 19:00 | 2 000 000 | Blocking subnets | 150 |
| 05/11/2007 19:30 | 1 500 | Attack was repeled | 50 (normal state) |
| 06.11.2007 6:00 - 06.11.2007 22:00 | 1 500 | Cisco working in a high secured configuration, we're loosing traffic many users were filtered by router | 80 |
| 06/11/2007 23:00 | 1 500 000 | Blocking subnets | 4000 |
| 07/11/2007 02:00 | 6 000 000 | Blocking subnets | 5000 |
| 07/11/2007 06:00 | 6 000 000 | Blocking subnets | 3500 |
| 07/11/2007 10:00 | 6 000 000 | Blocking subnets, connecting to our provider | 280 |
| 07/11/2007 12:00 | 12 000 000 | Blocking subnets in an automatic way | 150 |
| 07/11/2007 14:00 | 12 000 000 | Leaving only Russian segment on Cisco | 50 |
| 07/11/2007 15:00 | 12 000 000 | Blocking Russian subnets | |
| 07/11/2007 17:00 | 5 000 | Cisco working in a high secured configuration, we're loosing traffic many users were filtered by router | 10 |
| 07/11/2007 19:00 | 1 000 | Attackers were stopped | 10 |
Attaque DDoS: petit aperçu dans Economie du web et de l'Internet, Hacking light, trucs et astuces, web 2.0, Web russe, Web/Tech | novembre 11, 2007 | Commentaires (0) | TrackBack (0) | Tweet
Commentaires sur: Attaque DDoS: petit aperçu
Poster un commentaire sur: Attaque DDoS: petit aperçu
« RSS par mail | Accueil | MP3: le retour de Allofmp3 »
Besoin de SEO, de développement, de rédaction de contenu web ? Besoin d'un blog, de Wordpress, de Prestashop ou autres nouvelles "choses web" ? Envie de travailler dans ces domaines ? --> Contactez-nous
