From 67d935166fb88a727e34782395db8dad53c888b1 Mon Sep 17 00:00:00 2001 From: "Skylar \"The Cobra\" Widulski" Date: Thu, 27 Oct 2022 12:21:44 -0400 Subject: [PATCH] Oops i added a file Signed-off-by: Skylar "The Cobra" Widulski --- posts/tor-ddos-2022-10.md.bak | 19 ------------------- 1 file changed, 19 deletions(-) delete mode 100644 posts/tor-ddos-2022-10.md.bak diff --git a/posts/tor-ddos-2022-10.md.bak b/posts/tor-ddos-2022-10.md.bak deleted file mode 100644 index feeaabe..0000000 --- a/posts/tor-ddos-2022-10.md.bak +++ /dev/null @@ -1,19 +0,0 @@ ---- -title: ~vern Onion DDoS -date: Mon, 24 Oct 2022 -author: ~vern team ---- - -Hi, - -We have recently been DDoSed over the Tor network, meaning our onion services were down for a short period of time. - -I first noticed strange behaviour starting around 9:30 AM, where ~vern onions would time out. I have seen this behaviour before, in DuckDuckGoOnion. I didn't know what it was, so I tried restarting the Tor service, which worked at first. Then it happened again, and when I restarted Tor, the onion sites would simply not connect at all. - -I began to wonder if maybe our ISP had blocked tor, or if it was another network issue. I tried using `torsocks` to cURL vern.cc, which worked on my local machine, but not the tildeserver. As my suspicions of the ISP grew, I decided to rule out a DoS attack by checking the data usage graphs. The one for October 24th showed a great spike in network usage at 9:30 AM, the time i began noticing the issues. - -![A graph showing data using for 2022-10-24](https://0.vern.cc/QU.svg) - -This graph proved that it wasn't the ISP, and our Tor service was, in fact, being DDoSed over the Tor network. It had to be over the Tor network, because no other services were going down. I disabled Tor and waited until around 1:00 PM, when I re-enabled Tor and the onion services started working again. Hopefully, this does not happen again in the future. - -~cobra