Cyprus44 DDoS Attack – 25/1/2010

Cyprus44 has now been out of action for over a week, having stopped functioning on the day the Orams verdict was released. Izzet Zorlu, the owner of the site, had improved the security of the site since the last attack, a costly action, but the current attack was of such a ferocity that this extra investment proved futile.

The simplest way to explain a DDosS attack is that the attackers take over a large number of PCs, unknown to their owners, and set them all to access the Cyprus44 website at the same time. This floods the website which slows down and finally halts. The initial response is to try to identify perhaps tens of thousands of attacking machines but to do this would usually be a waste of time.

A firewall supposedly can analyse the addresses of each of the attacking machines, or “bots” as they are called, and block them. Unfortunately if the attack is ferocious the firewall often cannot cope and the only solution is to spend thousands of pounds on a more powerful firewall. Some devices can push the attack away from the website so the website can begin to operate normally.Unfortunately, unless the website has the money to pay for this, this solution is usually too expensive to apply.

The real solution is to trace the individuals controlling the attack and to either shut them off or have them arrested. The process whereby this is achieved is often through experts monitoring chat sites frequented by attackers. Usually only 10 or 20 machines control the attack and identifying these makes stopping the attack a lot easier.

The first question to ask is who is behind these attacks. Everyone has a theory, “it’s the GC government wanting to stop Cyprus44’s anti GC messages,” or “it’s Turkey stopping all the panic following the Orams case” and “it’s little nige, who wants to steal all of the Cyprus44 members.” All these theories have one thing in common – they are all uninformed gossip.

Izzet is currently working on finding a solution to the problem of DDoS attacks but this time it will have to be capable of coping with any attack thrown at it. Companies such as Twitter and the BBC are constantly under attack and their hosting companies are experts at preventing website down time. The only problem is the cost and the time taken to move Cyprus44. So, be patient and realise that Izzet will not just let Cyprus44 disappear because someone does not like what the website stands for.

Print Friendly, PDF & Email

Comments are closed.