Wikileaks, Dodging DDoS, Bounces Back to Amazon

The Web site of Wikileaks was moving quickly to stay out of the way of large scale denial of service attacks on Sunday and Monday, following the release of a trove of sensitive U.S. diplomatic cables. The controversial site, which has spent months trying to find a home secure from government seizure, now appears to be hosted on servers that are part of U.S. firm Amazon.com’s giant hosted Web Services infrastructure based in Seattle, Washington.

WikileaksThe Web site of Wikileaks was moving quickly to stay out of the way of large scale denial of service attacks on Sunday and Monday, following the release of a trove of sensitive U.S. diplomatic cables. 

The controversial site, which has spent months trying to find a home secure from government seizure, now appears to be hosted on servers that are part of U.S. firm Amazon.com’s giant hosted Web Services infrastructure based in Seattle, Washington.

Wikileaks posted its collection of more than 250,000 sensitive government documents Sunday evening, dubbing the operation “cablegate.” Even before the release, however, the group was being targeted by DDoS attacks. A Twitter post from Wikileaks on Sunday said the group was suffering under a “massive denial of service attack.”

However, the site was soon back up, with requests returning an IP Address that resolves to Amazon’s Amazon Web Services (AWS) infrastructure in Seattle. The move reverses an effort by Wikileaks to migrate off of Amazon’s infrastructure to a single server belonging to Web hosting firm Octopuce in France, according to an analysis by Internet security firm Netcraft. That ended Sunday, as the pending leak of the the U.S. diplomatic cables – part of a massive trove of sensitive documents relating to U.S. military and diplomatic activity allegedly provided by U.S. service member Bradley Manning.

Following its release of Iraq War documents, Wikileaks has pursued numerous options for hosting its Web servers as it readied further releases of sensitive documents. Wikileaks founder Julian Assange reportedly struck a deal with Sweden’s Pirate Party in August to host the Web site on Servers located within that country’s Parliament, which enjoys immunity from prosecution. 

However, the site was soon on the move again, in search of infrastructure that could support both the high level of legitimate traffic and efforts by unknown parties to take the site offline. That road appears to have led back to Amazon’s massive EC2 hosted infrastructure. 

Stay tuned for more coverage of Wikileaks cablegate on Threatpost.

Suggested articles

Discussion

  • Anonymous on

    Large scale DDoS?  Or more like simple DoS from one perpetrator....@th3J35t3r

  • Sam Bowne on

    The attack on Wikileaks was the work of one man, the Jester.  More details here:

    http://samsclass.info/thejester.htm

     

  • Anonymous on

    Wikileaks is the best thing to happen to the world since AD 1

  • Anonymous on

    WikieLeaks should read my website about the white RAF officres slaves who work for very long hours without pay, regularly 20 hours a day, including weekends, running the stations,(not housework.)

    Without a wife to travel the world with them military officers are unlikely to obtain a promotional post, therefore they will commit any crime and do anything to attain that end, including forced proxy marriage, as happened to me. We are promised half the pension and the substantial gratuity payment,(intended for house purchase) which is entered on the pay slip every month., but if we object we are told we can go, but the children will stay with their father, with no contact ever again for their mother.

    The children have to go to boarding school at 11-12.years to allow their mother to work longer hours, but then they are ejected at approximately 16 years, and have to start work, because their father retires at 55 and does not want to keep them.

    Near retirement we are posted to a HQ. UNIT and told we are going to be divorced, so we have to consult the local Citizens Advice Bureau to hire a solicitor, where unbeknown to us the MoD had planted an ex Wing Commander as manager . He processes al the special wives through the next door solicitor where we are asset stripped with a vengeance. No promised Pension or Gratuity, very few of our personal possessions , but worst of all we never see our precious, abducted and brainwashed chidren ever again, to whom we have been virtually lone parents.

    We lived on about half the Social Security payment and regularly starved when it it is witheld, and the system assures that we are miles apart from any other victims as the organisation is highly secret.

     However, with extensive research, which is very difficult with no money, I finally discovered the criminal system, therefore I advised the Head of the Citizens Advice Bureau to employ only female managers as they would not agree to the children being separated from their mothers.

    Consequently the bent solicitor lost his "nice little earner" as he was cornering the local market in Legal Aid Certificates, so he was compensated by being promoted to President of the Law Society, thus ensuring that no other solicitor would take our case to sue him. The Official Secrets Act prevents any publicity whatsoever.

    I created my website in 1998 :-  http:// rafwives.myzen.co.uk

     

  • Alex Norcliffe on

    I blogged about this on Sunday night shortly after the release, and it's since been picked up by the WSJ and The Guardian. The Warlogs were / are intermittently hosted by Amazon too.

    Details here:

    My posts:

    http://boxbinary.com/2010/11/wikileaks-hosting-cablegate-on-amazon-ec2-us-servers/

    http://boxbinary.com/2010/10/why-wikileaks-warlogs-site-servers-hosted-in-the-us-amazon-ec2-not-sweden/

    WSJ:

    http://blogs.wsj.com/digits/2010/11/29/wikileaks-using-amazon-servers-after-attack/

    The Guardian:

    http://www.guardian.co.uk/technology/2010/nov/29/wikileaks-amazon-ec2-ddos?showallcomments=true

  • Anonymous on

    I prefer: wget --mirror --no-parent --cache=off --tries=inf --random-wait http://www.amazon.com >/dev/null 2>&1 simply to say i don't like amazon

Subscribe to our newsletter, Threatpost Today!

Get the latest breaking news delivered daily to your inbox.