2

Running a political blog over TOR network with a .onion domain name

I have been getting DDoS attack, I know how to mitigate an attack on clear net where the packets coming from normal IP addresses, but the case here is different.

All connections to the server are coming from localhost 127.0.0.1

# netstat -anp | grep 'tcp\|udp' | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
  1 195.189.96.148
  1 218.92.0.160
  1 46.185.218.128
  3 
  5 0.0.0.0
  8238 127.0.0.1

as you can see over 8k of connections to the server from 127.0.0.01

tcp        0      0 127.0.0.1:80            127.0.0.1:51588         ESTABLISHED
tcp        0      0 127.0.0.1:80            127.0.0.1:51590         ESTABLISHED
tcp        0      0 127.0.0.1:80            127.0.0.1:51592         ESTABLISHED
tcp        0      0 127.0.0.1:80            127.0.0.1:51594         ESTABLISHED
tcp        0      0 127.0.0.1:80            127.0.0.1:51596         ESTABLISHED
tcp        0      0 127.0.0.1:80            127.0.0.1:51598         ESTABLISHED
tcp        0      0 127.0.0.1:80            127.0.0.1:51600         ESTABLISHED
tcp        0      0 127.0.0.1:80            127.0.0.1:51602         ESTABLISHED
tcp        0      0 127.0.0.1:80            127.0.0.1:51604         ESTABLISHED
tcp        0      0 127.0.0.1:80            127.0.0.1:51606         ESTABLISHED
  • The calls are coming from inside the house! ;) – Jeshizaemon Oct 21 at 7:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.