The background traffic is loud.

Written By: - Date published: 8:41 am, September 2nd, 2020 - 16 comments
Categories: Financial markets, internet, Media, The Standard - Tags: , , ,

Along with the grey weather, the weather around our local net is downright annoying at present. There are a massive increase in attempts to break into this site via backend systems and brute force front-end logins, a surge in scans from the search engine spider bots, and a lot of requests for putting up paid content. All of which have been ignored or dealt with.

Just looking through the logs, I’d say that over the last couple of months we have had at least a ten-fold increase in total traffic, and a mere doubling of human traffic heading into our moving election.

Most of which has been handled just by our usual security systems. But I suspect that this is just a side-effect of a more general run on out local net based on news reports of hacking and denial of service attacks.

For instance from Stuff “Govt spy agency has ‘no clues’ on source of cyberattacks on NZX” where amongst reporting on other attacks they detail attacks on media and other financial institutions.

Stuff spokeswoman Candice Robertson said Stuff had been targeted by a DDoS attack on Sunday which it had successfully defended itself against.

“Importantly, the Stuff site remains secure,” she said.

Radio NZ spokeswoman Charlotte McLauchlan said it had also experienced multiple DDoS attacks during the past 24 hours.

“We understand this may have been the same group that has been attacking the NZX and we are currently investigating,” she said.

“Our site remains secure and this has not impacted our audience.”

The country’s biggest banks are tightening security to protect themselves from similar attacks.

It is understood banks have been facing attempted attacks, although the Reserve Bank said it had not been advised of any significant issues over the weekend.

Little said most organisations were prepared for DDoS attacks and were able to “absorb them without disruption”.

“They fizzle out once it is clear they are not going to yield any response that the attacker might want,” he said.

Stuff “Govt spy agency has ‘no clues’ on source of cyberattacks on NZX

The MetService web site went down, as I noticed when I reached for their rain radar before biking to work.

MetService is the latest organisation to be hit by the same cyber attack that crashed the NZX website for five days.

The weather forecaster was hit by a DDoS (distributed denial of service) attack today, but a spokesman said it was dealt with “in a timely manner”.

“As of 5pm today, there has been no notable loss of performance to any MetService digital platforms,” he said.

“MetService also operate a back-up site, this site contains all safety critical information, and includes authorised MetService severe weather watches and warnings, MetService rain radar imagery and brief forecast information.”

NZ Herald “MetService latest NZ organisation to be hit by targeted cyber attack, TSB experiences tech issues

It seems to be ongoing, as I’m getting the same thing today as I’m reaching for my bike helmet.

As this site is purely volunteer (thank you authors and moderators), financed by unsolicited donations (thanks a lot of for the higher donations in August) and my occasional spurts of work, we’re not a high value target. So personally I mostly notice the traffic on the background net by the pitch of the hum of my system fans in our living room.


Of course not all outages are the result of malicious action. While our site had an outage on 23th and 24th of August. That eventually proved to be a failing SSD drive slowing down the RAID array that runs the database of the The Standard on my home server. I sat down over weekend and wrote a routine to low level test for drives that were actually slowing down, but which were not triggering SMART errors so it could retire drives. I also added 3 spare drives to The Standard array to add to the single spare drive still running on it.

It is a case of closing door after the fact – but I’m sure that there has been a lot of that happening elsewhere around the local network this week.

Because of the extra load on my network, I added a feature two weeks ago to be a little more paranoid. The Wordfence utility, that does the bulk of the protection at the The Standard server, has a feature that will block known malicious IP numbers based on attacks coming from those locations. I turned it back on, and the unwanted traffic at the site dropped markedly.

But like all good security features, it is a double sided weapon. It also blocked at least one reader coming from the Flip ISP – probably because they had a dynamic IP from a previous bad actor. They reached out to me and I put in an over ride for the whole of the Flip address range. It anyone else notices a blockage, then could you contact me giving me your internet service provider, and I’ll make a case-by-case exception.

Since the 90% of our human traffic comes from within the NZ network, I’d like to put a free gateway around the local NZ IPv4 and IPv6 addresses – which are accessible here. Does anyone know of a computer readable and accessible list that can be read – I’d add that to the daily tasks.

16 comments on “The background traffic is loud. ”

  1. Andre 1

    Huh. It never occurred to me the reason Wordfence was giving me the single-finger 403 salute might be because I'm with Flip. I just figured it was a side effect of other issues that seemed to be happening at the same time.

  2. greywarshark 2

    We know that there has been a permanent underclass caused by free market, neolib economic practices called the precariat. The whole society has by wholeheartedly adopting tech that has no heart and putting vast amount of our communications and transactions on-line, opened us up to interference from any malefactor or grifter in the world leaving us in a vulnerability that has made our very living precarious.

    • Jum 2.1

      We also know this is happening just before an election and the particular targets have been chosen carefully.

  3. Jum 3

    collins' shadow portfolio national security and intelligence. brownlee's shadow portfolios GCSB, NZSIS, Covid 19 border response

    do collins/brownlee sit in at all national security meetings?

  4. RedBaronCV 4

    Excuse my ignorance but is it likely these attacks are coordinated or all from the one source? Do they want anything from NZ as a whole? Are they likely to be a practice run for ahem a similar attack on another country? While everyone is busy trying to shut this down is something else being sneaked in through a back door.? Is there a possibility of a commercial imperative – drive everyone onto cloud servers so that the attacks can be repelled by more bandwidth.

    • lprent 4.1

      Not particularly coordinated as far as I can see. Looks like a series of different criminal extortion groups trying their luck.

      I suspect that their ‘normal’ targets in other countries like the US and Europe are getting harder due to past experiences. So they’re expanding out to other countries. Basically there are a pile of compromised systems out there that can be hired as botnets from the malware controllers. So they get hired and target prospects.

      In the case of The Standard, every 3 years as part of the election cycle we get a significiant increase in human traffic. This attracts bots and people who’d like to compromise a higher traffic site or who’d like us to put up posts linking to or extolling their services. A third of my visible email comes from them. Since I throw them to the heuristic anti-spam systems for dispersion to the wider email world. I eventually don’t see them any more. My spam folder is rife with them until their score gets high enough and they just get rejected before the email arrives.

      This year, there appear to be a lot robotic emails and systems more than usual even in the election season. Probably because of the longer election period. Possibly because there are more botnets available. The worst I have seen so far is about 104 individual systems attempting brute force logins in a 5 minute period. They get three tries and then they are ignored for an hour. If they persist then they’re tagged as a threat and blocked for days or months. Same for systems trying various wordpress exploits.

      Plus of course the usual spiders from google, bing, baidu, and at least a few hundred more website scrapers are busy scuttling over the site more often because there are more comments.

      It is a bit noisy at present.

    • Stuart Munro 4.2

      This year has seen a substantial increase in attacks, which seem to have rolled through a number of countries, of which NZ appears to be the latest. Some large corporations, notably Amazon, have also been targeted.

      It is likely a loose group of attackers, perhaps somewhat like the Macedonian youtubers, but such groups may well be assisted or directed at some level by a state actor.

  5. Draco T Bastard 5

    Does anyone know of a computer readable and accessible list that can be read – I’d add that to the daily tasks.

    Open Visual Trace Route seems to have such a list. Probably made up of one or more of the licences included in the package such as:

    • lprent 5.1

      The easiest way is for me to load the NZ IP ranges directly into wordfence.

      I thought of MaxMind. But their country DB is USD 24 per shot or per month. And it is for the whole world.

      I'll have a look at the others once I'm outside corporate firewalls.

      The best one I have seen so far is https://lite.ip2location.com/database-ip-country

      It is a bit annoying that wordfence has a blacklist for countries and it has a global blacklist IP list.

      But it doesn't have a whitelist for countries that overrides the blacklist for IPs. So the only only real way to have the blacklist IPs, but let the whole of the NZ IP list (ie >90% of our human readers) through is to put the whole list of NZ IP ranges into the wordfence list.

      grumble

  6. gsays 6

    I have heard from a few people now, that part of the problem the NZX has been facing, is a lack of band with. Both at the business level and nationally.

    The analogy is the 'pipe' size coming into NZ is not big enough.

    So… does an answer lie in bigger 'plumbing'? Or can our internet come thru the air/space/satelite?

  7. karol121 7

    Ransom might just have to be considered a business related expense these days, until such time as many of the systems are "sured up" for a quick fix, completely overhauled or replaced.

    The old story; IFF (Identify Friend or Foe), but in this day and age of IP address spoofs, node "air gaps" and imposters posing as legit requester's or clients, what is guaranteed, let alone considered foolproof?

    GCSB (using the Centre for Critical Infrastructure Protection unit) considered these attacks and other vulnerabilities many years ago, but knowing about something and publicizing it simply affords education to those they serve, not protection.

    Just the cost of an internet presence is what I see.

  8. infused 8

    stop using consumer ssd's and smart will work properly.

  9. Ric Stacey 9

    My ISP is Flip. No problems in the last hour. (7.40pm now)

    • Andre 9.1

      I've had no problems today or yesterday. It was a few days back that Wordfence was doing the "computer says no" thing.

  10. sumsuch 10

    Sorry to hear, Lynn. They won't get by you. Other Left blogs, not so much.

Recent Comments

Recent Posts

  • Government invests further in Central Hawke’s Bay resilience
    The Government has today confirmed $2.5 million to fund a replace and upgrade a stopbank to protect the Waipawa Drinking Water Treatment Plant. “As a result of Cyclone Gabrielle, the original stopbank protecting the Waipawa Drinking Water Treatment Plant was destroyed. The plant was operational within 6 weeks of the ...
    BeehiveBy beehive.govt.nz
    15 hours ago
  • Govt boost for Hawke’s Bay cyclone waste clean-up
    Another $2.1 million to boost capacity to deal with waste left in Cyclone Gabrielle’s wake. Funds for Hastings District Council, Phoenix Contracting and Hog Fuel NZ to increase local waste-processing infrastructure. The Government is beefing up Hawke’s Bay’s Cyclone Gabrielle clean-up capacity with more support dealing with the massive amount ...
    BeehiveBy beehive.govt.nz
    17 hours ago
  • Taupō Supercars revs up with Government support
    The future of Supercars events in New Zealand has been secured with new Government support. The Government is getting engines started through the Major Events Fund, a special fund to support high profile events in New Zealand that provide long-term economic, social and cultural benefits. “The Repco Supercars Championship is ...
    BeehiveBy beehive.govt.nz
    17 hours ago
  • There is no recession in NZ, economy grows nearly 1 percent in June quarter
    The economy has turned a corner with confirmation today New Zealand never was in recession and stronger than expected growth in the June quarter, Finance Minister Grant Robertson said. “The New Zealand economy is doing better than expected,” Grant Robertson said. “It’s continuing to grow, with the latest figures showing ...
    BeehiveBy beehive.govt.nz
    19 hours ago
  • Highest legal protection for New Zealand’s largest freshwater springs
    The Government has accepted the Environment Court’s recommendation to give special legal protection to New Zealand’s largest freshwater springs, Te Waikoropupū Springs (also known as Pupū Springs), Environment Minister David Parker announced today.   “Te Waikoropupū Springs, near Takaka in Golden Bay, have the second clearest water in New Zealand after ...
    BeehiveBy beehive.govt.nz
    20 hours ago
  • More support for victims of migrant exploitation
    Temporary package of funding for accommodation and essential living support for victims of migrant exploitation Exploited migrant workers able to apply for a further Migrant Exploitation Protection Visa (MEPV), giving people more time to find a job Free job search assistance to get people back into work Use of 90-day ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Strong export boost as NZ economy turns corner
    An export boost is supporting New Zealand’s economy to grow, adding to signs that the economy has turned a corner and is on a stronger footing as we rebuild from Cyclone Gabrielle and lock in the benefits of multiple new trade deals, Finance Minister Grant Robertson says. “The economy is ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Funding approved for flood resilience work in Te Karaka
    The Government has approved $15 million to raise about 200 homes at risk of future flooding. More than half of this is expected to be spent in the Tairāwhiti settlement of Te Karaka, lifting about 100 homes there. “Te Karaka was badly hit during Cyclone Gabrielle when the Waipāoa River ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Further business support for cyclone-affected regions
    The Government is helping businesses recover from Cyclone Gabrielle and attract more people back into their regions. “Cyclone Gabrielle has caused considerable damage across North Island regions with impacts continuing to be felt by businesses and communities,” Economic Development Minister Barbara Edmonds said. “Building on our earlier business support, this ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • New maintenance facility at Burnham Military Camp underway
    Defence Minister Andrew Little has turned the first sod to start construction of a new Maintenance Support Facility (MSF) at Burnham Military Camp today. “This new state-of-art facility replaces Second World War-era buildings and will enable our Defence Force to better maintain and repair equipment,” Andrew Little said. “This Government ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Foreign Minister to attend United Nations General Assembly
    Foreign Minister Nanaia Mahuta will represent New Zealand at the 78th Session of the United Nations General Assembly (UNGA) in New York this week, before visiting Washington DC for further Pacific focussed meetings. Nanaia Mahuta will be in New York from Wednesday 20 September, and will participate in UNGA leaders ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Midwives’ pay equity offer reached
    Around 1,700 Te Whatu Ora employed midwives and maternity care assistants will soon vote on a proposed pay equity settlement agreed by Te Whatu Ora, the Midwifery Employee Representation and Advisory Service (MERAS) and New Zealand Nurses Association (NZNO), Minister of Health Dr Ayesha Verrall announced today. “Addressing historical pay ...
    BeehiveBy beehive.govt.nz
    7 days ago
  • New Zealand provides support to Morocco
    Aotearoa New Zealand will provide humanitarian support to those affected by last week’s earthquake in Morocco, Foreign Minister Nanaia Mahuta announced today. “We are making a contribution of $1 million to the International Federation of Red Cross and Red Crescent Societies (IFRC) to help meet humanitarian needs,” Nanaia Mahuta said. ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Government invests in West Coast’s roading resilience
    The Government is investing over $22 million across 18 projects to improve the resilience of roads in the West Coast that have been affected by recent extreme weather, Prime Minister Chris Hipkins confirmed today.  A dedicated Transport Resilience Fund has been established for early preventative works to protect the state ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Government invests in Greymouth’s future
    The Government has today confirmed a $2 million grant towards the regeneration of Greymouth’s CBD with construction of a new two-level commercial and public facility. “It will include a visitor facility centred around a new library. Additionally, it will include retail outlets on the ground floor, and both outdoor and ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Nanaia Mahuta to attend PIF Foreign Ministers’ Meeting
    Foreign Minister Nanaia Mahuta will attend the Pacific Islands Forum (PIF) Foreign Ministers’ Meeting, in Suva, Fiji alongside New Zealand’s regional counterparts. “Aotearoa New Zealand is deeply committed to working with our pacific whanau to strengthen our cooperation, and share ways to combat the challenges facing the Blue Pacific Continent,” ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • PREFU shows no recession, growing economy, more jobs and wages ahead of inflation
    Economy to grow 2.6 percent on average over forecast period Treasury not forecasting a recession Inflation to return to the 1-3 percent target band next year Wages set to grow 4.8 percent a year over forecast period Unemployment to peak below the long-term average Fiscal Rules met - Net debt ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • New cancer centre opens in Christchurch
    Prime Minister Chris Hipkins and Minister of Health Dr Ayesha Verrall proudly opened the Canterbury Cancer Centre in Christchurch today. The new facility is the first of its kind and was built with $6.5 million of funding from the Government’s Infrastructure Reference Group scheme for shovel-ready projects allocated in 2020. ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Government invests in top of the south’s roading resilience
    $12 million to improve the resilience of roads in the Nelson, Marlborough and Tasman regions Hope Bypass earmarked in draft Government Policy Statement on land transport $127 million invested in the top of the south’s roads since flooding in 2021 and 2022 The Government is investing over $12 million to ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • New Zealanders continue to support the revitalisation of te reo as we celebrate Te Wiki o te Reo Mā...
    Ko tēnei te wiki e whakanui ana i tō tātou reo rangatira. Ko te wā tuku reo Māori, e whakanuia tahitia ai te reo ahakoa kei hea ake tēnā me tēnā o tātou, ka tū ā te Rātū te 14 o Mahuru, ā te 12 o ngā hāora i te ahiahi. ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • New Wildlife Act to better protect native species
    The 70-year-old Wildlife Act will be replaced with modern, fit-for-purpose legislation to better protect native species and improve biodiversity, Minister of Conservation Willow-Jean Prime has announced.   “New species legislation is urgently needed to address New Zealand’s biodiversity crisis,” Willow-Jean Prime said.   “More than 4,000 of our native species are currently ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Further safety initiatives for Auckland City Centre
    Central and Local Government are today announcing a range of new measures to tackle low-level crime and anti-social behaviour in the Auckland CBD to complement Police scaling up their presence in the area. “Police have an important role to play in preventing and responding to crime, but there is more ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Govt confirms additional support for Enabling Good Lives
    The Government has confirmed $73.7 million over the next four years and a further $40.5m in outyears to continue to transform the disability support system, Minister for Disability Issues Priyanca Radhakrishnan has announced. “The Enabling Good Lives (EGL) approach is a framework which guides positive change for disabled people, ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • New Zealand gets AAA credit rating from S&P
    Standard and Poor’s is the latest independent credit rating agency to endorse the Government’s economic management in the face of a deteriorating global economy. S&P affirmed New Zealand’s long term local currency rating at AAA and foreign currency rating at AA+ with a stable outlook. It follows Fitch affirming New ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Appointment of Environment Court Judge
    Christchurch barrister Kelvin Reid has been appointed as a Judge of the Environment Court and the District Court, Attorney-General David Parker announced today. Mr Reid has extensive experience in Resource Management Act issues, including water quality throughout the South Island. He was appointed to the Technical Advisory Group advising the ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • NZ’s biggest ever emissions reduction project hits milestone
    New Zealand is on track to have greener steel as soon as 2026 with New Zealand Steel’s electric arc furnace project reaching a major milestone today.   The Government announced a conditional partnership with New Zealand Steel in May to deliver the country’s largest emissions reduction project to date. Half of ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Poroporoaki: Paki Leslie Māngai Nikora
    Pokia ana te tihi Taiarahia e Hine-Pūkohu-rangi Hotu kau ana te manawa! Horahia ana te whārua o Ruātoki e te kapua pouri Tikaro rawahia ko te whatumanawa! Rere whakamuri kau ana te awa o Hinemataroa Ki te kawe i te rongo ki te mātāpuna i nga pōngaihu Maungapōhatu, tuohu ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • 50,000 charges laid in crack down on gangs
    Police Minister Ginny Andersen has today congratulated Police in their efforts to crack down on gangs, after laying 50,000 charges against gang members and their associates through the hugely successful Operation Cobalt. As at 31 August, Police have: Laid 50,396 criminal charges against gang members and their associates Issued 64,524 ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Farmers and cyclone-affected properties supported with tax rule changes
    The Government has confirmed details of the tax changes to the bright-line test for cyclone-damaged properties, with the release of the required legislative amendments. Revenue Minister Barbara Edmonds has released a Supplementary Order Paper (SOP) to be considered by the Finance and Expenditure Committee in the next Parliament, as it ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • New Zealand wins CPTPP dispute against Canada
    Minister for Trade and Export Growth Damien O’Connor has welcomed the CPTPP Panel’s ruling in favour of New Zealand in our dispute against Canada, a significant win for our primary sector exporters. The Panel found that Canada’s dairy quota administration is inconsistent with its obligations under the Comprehensive and Progressive ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • New intensive turnaround programme launched to break the cycle of offending
     The next phase of the Government’s response to youth crime is underway, with an intensive programme for the country’s most prolific young offenders launched today in Auckland, Minister for Children Kelvin Davis said. The programme, announced by Prime Minister Chris Hipkins in July, will see up to 60 recidivist young ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Government extends report date for COVID inquiry
    The Government has agreed to a request from the Royal Commission of Inquiry into COVID-19 for extra three months to deliver its final report. The Royal Commission was established in 2022 to strengthen New Zealand’s preparedness for any future pandemics. It was originally due to conclude mid-2024. “The Commission has ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Wainuiomata school property upgrade making great progress
    The Wainuiomata High School redevelopment is making great progress, with two more classroom blocks set to be complete by the end of the month, Prime Minister Chris Hipkins announced today. The Prime Minister visited today to see first-hand the progress of the redevelopment which is continuing at pace and is ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Language week focuses on sustaining Lea Faka-Tonga
    New Zealand’s Tongan community are coming together to promote language sustainability this week, as Uike Lea Faka-Tonga – Tongan Language Week begins.  “For our Pacific communities, language is more than just a means of communication. It’s an important way to link generations and maintain connections to our ancestral roots,” Barbara ...
    BeehiveBy beehive.govt.nz
    3 weeks ago

Page generated in The Standard by Wordpress at 2023-09-21T18:20:07+00:00