[anti-censorship-team] DDoS on Greenhost, may affect Snowflake

[David Fifield]

On Mon, Dec 21, 2020 at 11:56:52AM -0500, Cecylia Bocovich wrote:
> Looking at broker metrics from the last couple days:
> https://snowflake-broker.torproject.net/metrics
> 
> There may have been a small drop in client match counts (from ~10,000 to
> ~9000) but nothing like a total outage.
> 
> It looks like there was a drop in bridge users on the 16th but not an
> obvious drop in the date range of the DDoS attack:
> https://metrics.torproject.org/userstats-bridge-transport.html?start=2020-12-10&end=2020-12-21&transport=snowflake
> 
> Thanks for the heads up. I'll keep an eye on the metrics because it
> sounds like it's still ongoing?

They say it's over since 2020-12-20 15:00.

https://status.greenhost.net/incidents/20
> Repeated DDoS attacks on our infrastructure (SOLVED)
> Sunday 20th December 2020 16:00:00
>
> After the DDoS attack last Thursday we experienced recurring attacks
> of increasing magnitude on our infrastructure.
>
> We especially experienced unavailability from 00:11 to 01:12 CET, and
> from 13:37 to 14:37 CET. This intermittently affected VPSes, hosting
> and e-mail services.
>
> At this point all our services are operational.
>
> A more complete report and analysis of the events since Thursday will
> be published in the coming days.