Cyber Risks · Krebs on Security

QAnon/8Chan Sites Briefly Knocked Offline

Summary: A phone call from security researcher Ron Guilmette to the owner of CNServers LLC in Hillsboro, Oregon, led the company to withdraw DDoS protection for a set of 254 Internet addresses that Spartan Host Ltd., registered in Belfast, Northern Ireland, was routing on behalf of Vancouver, Washington-based VanwaTech, briefly knocking multiple 8kun and QAnon-related sites offline. The sites came back online after Spartan Host changed its settings so that ddos-guard[.]net, a company based in St. Petersburg, Russia, protected VanwaTech's addresses, and Spartan Host founder Ryan McCully confirmed he intends to keep VanwaTech as a customer.

Bottom line: A single upstream provider's decision was enough to take a large cluster of 8kun and QAnon sites offline, which shows how concentrated the availability of such content is among a handful of DDoS-protection and hosting firms - and how a confidential private peering arrangement between Spartan Host and VanwaTech kept that dependency out of view until someone asked.

Read the original at Krebs on Security ↗

Topics
Endpoint & Network Security
Related