I was thinking bandwidth (at first) when they suspended my website. But then I realized, I have unlimited bandwidth, so that wouldn’t be a reason to suspend me. So I call them on the phone to: first to get the account restored and gain access, and second to figure out why it went down like it did, so I could stop the problem from happening again. Why was the performance on my site so degraded and using so much resources it caused a large company with lots of servers to slow to a crawl, and almost crashed the company’s servers? :hmm: Good question!
:nerd: So I get into nosing through server logs, boring stuff mostly. :yawn: Then I find something very interesting. Several IP numbers (IP - Internet Protocol - numbers used to assign addresses to individual computers and websites) are calling for the same files (huge movie files) over and over and over. And as I read the logs it becomes perfectly clear what is going on here. Someone is trying to crash my website. :shock: Why else would someone repeatedly load movies 30, 40, 50, 60, 1000 (etc…) times a minute? And they weren’t just loading them from one computer in the address block. Heck no!. Try 20 or more computers per block, and doing this from several address blocks all at the same time. Who would be so evil? 
:nerd: I then decide to run a search for the perpetrators of this grave injustice, this crime against my site. And what do I find? Lo and behold, it turns out that a big chunk of the address blocks in question belong to the CIA or Central Intelligence Agency. Wow :shock:
To make a long story short, their (CIA) attack with computer bots was an attempt to take my website down. It (the CIA bot network script) was aimed at some old movies I had, with an inefficient plugin running the scripts that calls for the movies to play. This inefficiency in the plugin, combined with the CIA bot network calling for it over and over, was in turn causing server performance degradation that almost shut down a company which houses more than 186,000 websites. :shock:
:aww: Now I had to fix the problem. 
What to do, what to do? 
The fix, it turns out, was actually pretty easy. :bigrin: Deactivate the plugin, 
and then block the offending evil CIA bots from ever visiting again. 
It’s a done deal. Ha Ha.
7 Responses to “It wasn’t bandwidth, but bots, government bots”
Leave a Reply
E-mail address never displayedHTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>
Use these smilies by clicking them:
so glad u fixed it static…
CIA = :furious:
so lets hope they get what they deserve…
three cheers for static :bigrin: :bigrin: :bigrin: for putting a stop to their attempt at shutting her down.
Wow, you must be really popular if the CIA has nothing better to do than try to shut you down. Glad you caught what was going on and fixed the problem. Stupid CIA has nothing better to do then harass you. Seems like they need a life.
Well, I am glad you are back on here.
Bridgey
Wow … you are like really some whiz compaired to my lil pea-brain :nerd: … dang. CIA? Sheez … I’m amazed. Are you sure they’re blocked out? :hmm: I’d be a gonner if’n it were to happen to me … I’ll give a great shout out of a Woo-Hoo
good job you got your site back! And I’ll keep my fingers crossed they don’t come back!
aw.. that is cool.. indeed your posts are very threatening to the government if that has been done to you my dear.
@Bridgey, you would know that she is More than popular if you would read some entries here.. this site is HOT… ^^
@ Laurabelle
you said
Yes unfortunately it was the CIA. Look at the some of the information I was able to glean on that issue for proof. :hmm:
OrgName: Central Intelligence Agency
OrgID: CIA-1
Address: GCS, ND1
City: Washington
StateProv: DC
PostalCode: 20505
Country: US
NetRange: 198.81.128.0 - 198.81.191.255
CIDR: 198.81.128.0/18
NetName: OIT-BLK1
NetHandle: NET-198-81-128-0-1
Parent: NET-198-80-0-0-1
NetType: Reassigned
Comment:
RegDate: 1997-02-11
Updated: 1998-03-30
RTechName: Central Intelligence Agency
RTechPhone: +1-703-874-5401
RTechEmail: edsn@ucia.gov
OrgTechName: Wheelock, David
OrgTechPhone: +1-703-613-9840
OrgTechEmail: davidw@ucia.gov
database, last updated 2008-11-17 19:10
then you said
Well, I believe that my blocking tactics will hold. I believe the address blocks that they were attacking from are blocked. I can only pray :praying: that they don’t start a new attack from new addresses.
But if they do then I will just block them again. What other choice do I have?
It makes me so happy that even though I’m not being bailed out, my tax money is being used to prevent open, intelligent minds from delivering information!!!!!!!
not?
You must be doing something right.