68kMLA Classic Interface

This is a version of the 68kMLA forums for viewing on your favorite old mac. Visitors on modern platforms may prefer the main site.

Click here to select a new forum.
Welcome back!
Posted by: ~tl on 2009-05-31 23:09:54
Well, I hope everyone enjoyed their mid-year forum detox...

...seriously though, sorry for the brief service interruption. Basically, since the 12th of last month I was getting an insane number of hits on one particularly large file on my server (that's nothing to do with the MLA) and that maxed my bandwidth allowance before the end of the month. This has never been a problem in the past, usually the monthly bandwidth usage is around 8GB, of which 90% is the MLA and is well within my limit. Last month this single file transferred over 14GB, which kinda pushed me over a little! Also, I didn't get any warning e-mails, so didn't notice until I got the same "bandwidth limit exceeded" when I tried to access the forums. I've been looking at the logs, and while I'm not ruling out some sort of DDoS attack, there doesn't seem to be any pattern to the access and it's spread over the course of a number of days.

I got in touch with my host, with the intention to buy some more bandwidth, but by the time they go back to me it was last night... so I decided it was hardly worth it for a couple of hours. They are looking in to why I didn't get any e-mails though, and I have removed the file in question, so hopefully this won't happen again. I'm also looking in to getting the MLA a dedicated hosting plan...

So, anyway, what were we talking about?!

Posted by: wthww on 2009-06-01 07:17:46
Thanks for taking care of it for us Tom! [much appreciated]

//wthww

Posted by: Dog Cow on 2009-06-01 15:37:50
Basically, since the 12th of last month I was getting an insane number of hits on one particularly large file on my server ... I've been looking at the logs, and while I'm not ruling out some sort of DDoS attack, there doesn't seem to be any pattern to the access and it's spread over the course of a number of days.
Sounds to me like a n00b who's not using an automated script, and is just clicking away himself. If there's not usually that much bandwidth used, then I'd say that's suspect. Also check the referrer information on this file, if you have that. If there is none, then that's pretty much a dead-ringer for some suspicious activity. If it was that a popular site had linked to your file, then you'd see that site's URL in the referrer data.

Posted by: MrMacPlus on 2009-06-01 17:29:47
There's also something called a pulsing zombie. Google it.

Posted by: Temetka on 2009-06-01 22:31:54
Glad to see the forum is back up!

If I had any cash I would make a donation so this doesn't happen again.

Anyone else here care to help the cause?

1