Hacker News Reader

Prolly exploiting a known vulnerability. Have you patched and rebooted all of your systems? Removed accounts that you dont use? Change pw's to everything?

Windows or Linux systems?

You can do some mitigation with iptables in linux.

>He has proved that he can by taking our sites offline for a minute.

What did this person take down exactly? The web server, or did he reboot the system?

View on HN

The fact that cloudflare was defeated shows it was a ddos and not a reboot. Most likely a bot net rented with BTC and nothing more than a fishing expedition. Unless they are being targeted for some other reason than money the problem will go away.

> The fact that cloudflare was defeated shows it was a ddos and not a reboot.

How?

It shows that it was a DDos simply by the fact that is what Cloudflare does? Protects against DDos attacks? IDK maybe your right, I supposed they could have spoofed a DDos using a small botnet and simultaneously rebooted the servers. That would require a level of sophistication but certainly possible.

They simply hit one of our url's, and we could put url's on that but they could just hit one of many.

Our system is scalable but we also don't want to scale indefinitely because of the attacks.

Reply on news.ycombinator.com