> apologise for the downtime
UK2.NET smashed offline by '10-million-strong' botnet
British web hosting outfit UK2.NET was on the business end of a distributed denial-of-service attack last night that took down customers' websites. The company's chief operating officer, Martin Baker, told The Register that UK2 had never seen a DDOS attack on this scale before. "There was a botnet attack last night on our DNS …
-
-
-
Thursday 26th April 2012 10:54 GMT Lee Dowling
Re: Huge attack!
Would you please tell us exactly what makes a UDP address any easier to fake than a TCP one, where denial of service is concerned?
You don't know that it tried to legitimately form connections, just that it send enough data to tie up their lines, or hang up their servers. An identical TCP packet could have done that WITHOUT waiting for an ACK packet in return (which, yes, wouldn't necessarily be able to find its way back to origin).
However, more scary in either case would be that UK2 have links to the Internet through people who don't remove spoofed addresses. 10m bots isn't impossible, but it sounds like someone, somewhere wasn't filtering out spoofed addresses they were putting onto the Internet.
-
Thursday 26th April 2012 12:09 GMT fatchap
Re: Huge attack!
"However, more scary in either case would be that UK2 have links to the Internet through people who don't remove spoofed addresses." That is the Internet isn't it?
How would you know that an address was spoofed? As long as it was not RGC1918 or from an unassigned block it could be legitimate.
-
-
-
-
-
This post has been deleted by its author
-
Thursday 26th April 2012 11:40 GMT Piloti
Re: Who gains?
I have to say, I was going to ask / say something similar ?
Just what is the point of DDOS ? Where is the benefit to the attacker? Or is it "just because they can" ?
I remember about a year ago some stories about Autotrader being hit for [what I recall] was the best part of a week. That probably cost them a lot of money in lost revenue.
A lot of the time it just seems to me to be childishness, caused by a [very small] minority of idiots who should probably go out, have a beer and get themselves laid…… at least once.
-
-
Thursday 26th April 2012 11:50 GMT Anonymous Coward
UK2 status page
Their status page is not the most reliable thing. Lots of things seem to happen that never make it that far, or only do so after the problem has existed for a couple of days.
As for no updates on Twitter? Probably the first they knew of the problem was when someone said "Hey you know that's the 1000th complaint I've heard today that someone's site is down. Maybe they were right after all"
-
Thursday 26th April 2012 12:18 GMT Andrew Jones 2
Whilst there is no gain for anywhere - I must admit to a tiny amount of Glee after the shoddy service I had with them.
Yes, you can cancel you services online in the dashboard - except it doesn't really cancel them - it just stops them being auto renewed - you MUST cancel in writing - which we did 4 times over the course of a year - but it never made it a difference - so when they started saying we owed them £300 we transferred the domains elsewhere - and they can just keep screaming at us - via a no longer active email address....
-
Thursday 26th April 2012 13:12 GMT Anonymous Coward
Uuurgghhhh
As someone who has in the past had to deal with the farce that is UK2.NET, taking it off the net isn't necessarily a "bad thing".
I'm sure they'll sort it out though. Oh hang on though... duh! Of course... I forgot about their utter lack of technical competency, complete lack of understanding of DNS, inability to deal with simple requests and questions that my cat could understand, and general uselessness. How silly of me! So, if we're lucky, it could be a while yet :-)
-
Thursday 26th April 2012 14:47 GMT Paul Taylor 1
Headache...
This nearly drove me freaking nuts yesterday.
Our domain was offline for almost 6 hours in total, no website, and no NS records. We completely dispeared off the map....
Spoke to the same support guy about 5 times during the outage, each time they could not say what the issue was, or how long it was going take.
just glad its over now..
-
Saturday 28th April 2012 01:47 GMT Tazzzie
UK2 DDOS Protection
From their page posted sometime when (its not dated): http://www.uk2.net/glossary/ddos_protection/
QUOTE: We will null route any DDoS attacks coming into or from our network, and have technology in place to prevent any overloading of our network.
END QUOTE:
We're hosted with them (and not affiliated in any way apart from paying hosting costs) and we were unaffected but the outage.