The attack began at 4:00 AM on September 29, 2024, targeting my image hosting service tc.zeruns.tech and blog blog.zeruns.tech. The image hosting used the DogeCloud integrated CDN. Around 20GB of traffic was used, triggering a peak shutdown of the CDN. HTTPS requests reached 1.1 billion, but due to the QPS settings, only about 15 million requests were billable, resulting in a loss of around 50 yuan.
For the most damaging attack record, check this: https://blog.zeruns.tech/archives/577.html
The compressed website logs for the attack period amounted to 818MB.
After extraction, the logs totaled 16.54GB and couldn’t be opened in VSCode.
Eventually, I found a software called emed64 that could handle it. Download emed64 here: https://www.123865.com/s/2Y9Djv-P9zvH
Examining the logs, most attack sources were from foreign IPs, spanning multiple countries. The attacking IPs were numerous, primarily Android devices (though they could have spoofed their user agents). The attacker seems to control a large number of compromised devices.
On September 30, 2024, at 3:00 PM, the attacks resumed. Looks like I'm being persistently targeted.
At 1:00 AM on October 1, 2024, another attack hit my other site blog.vpszj.cn and an alternate domain for the image hosting service, tc2.zeruns.tech. This time, around 380GB of traffic was used, resulting in a loss of 40 yuan.
Recommended Reading
- High-cost-performance and affordable VPS/cloud server recommendations: https://blog.vpszj.cn/archives/41.html
- Detailed guide to building a blog without coding: https://blog.zeruns.tech/archives/783.html
- Internal network penetration server setup tutorial (NPS): https://blog.zeruns.tech/archives/741.html
- Minecraft server setup guide: https://blog.zeruns.tech/tag/mc/
- Palworld server setup tutorial: https://blog.zeruns.tech/tag/PalWorld/
- Review and teardown of the Mechrevo iMini Pro820 mini PC: https://blog.zeruns.tech/archives/813.html
Comment Section