Skip to content or view screen version

BNP website has been down for over 48 hours

@ | 16.08.2009 12:20

Just observing that the BNP website, their main propaganda tool, has been offline for over 48 hours. Not sure if it was a technical error or that they have moved IP address.

thats all!

@

Comments

Hide the following 17 comments

According to 'Web Guru' Bennett

16.08.2009 12:33

"BNP webmaster Simon Bennett released the following statement;
“(The) BNP website is down due to another DDoS attack… I am on the case, but we could be offline for 24 hours!, it is lucky I stayed at home after all.”

Past attacks have originated from a network of Russian computers, it is unclear if this attack is being carried out by the same people. The perpetrators obviously believed that Simon would be at the festival, and therefore, unable to bring the site back online for some time.

There is absolutely no basis in the leftist rumours that party leader Nick Griffin sacked Simon Bennett and “he pulled the plug, furious with Griffin.”

Updated as we receive more information.

4pm: Site should be back within the next hour according to Simon Bennett.

10pm: As past events have demonstrated these attacks tend to span the full 24 hours. Sorry Guys, you’ll need to get your BNP fix tomorrow. These attacks cost money, who is writing the cheques?

10:30pm: Just to clear up a few more rumours that seem to spread whenever the site is down; Richard Barnbrook’s site is under reconstruction, but as it is hosted from the same IP, it has also been brought low by the attack. The upgraded hardware purchased using funds from generous members and supporters was used to increase the load time. Attacks of this nature have the ability to bring down government grade networks.

1:30am: BNP Webmaster: I cannot put up a holding page as it would take 4 hours to change the nameservers and another 4 to change them back when the new server has transferred the 300 odd gigabytes of data.

It is taking longer than hoped to resolve this attack, but it will be worthwhile as we will have DDoS protection in place and far more power to deal with attacks.

On the plus side, the idiots have attacked the website on a very quiet weekend giving me a great opportunity to measure and deal with future attacks."

Any tech savvy IMCers care to rip this load of shite to bits?

Jeff


not much

16.08.2009 13:11

> Any tech savvy IMCers care to rip this load of shite to bits?

not really, sounds about right to me, apart from there is not much you can do against a DDoS attack if its from a large network. Its just how the internet works, not rocket science. Changes the IPs and nameservers and move on

tab


What a coincidence...

16.08.2009 13:21

What a coincidence that it happens the same weekend that Gri££in has all his Nazi pals around him, wallets in hand.

I think this tells you all you need to know: 'The upgraded hardware purchased using funds from generous members and supporters'

It's just Gri££in rinsing his thick-as-pigshit members at every opportunity... as usual, using a bullshit excuse...as usual

afa


Bullshit

16.08.2009 13:59

"I cannot put up a holding page as it would take 4 hours to change the nameservers and another 4 to change them back when the new server has transferred the 300 odd gigabytes of data."

Nameservers can be changed in minutes and I've never known propagation to take more than an hour. And 300GB? Large corporations don't have 300GB of data - what the hell does the BNP have in its data banks, all the horse-porn films in its collection?

Mr A. Chapp
- Homepage: http://lancasteruaf.blogspot.com/


Absolutely

16.08.2009 15:27

Mr A. Chap,

You are exactly right - there is I believe NO DDoS going on - the reply from the server is Error 102 (net::ERR_CONNECTION_REFUSED): Unknown error which would suggest the site is down rather than it is undergoing an attack. Also its response time to deliver the error would also indicate the same thing,

The last time they alleged DDoS was the end of May - so I wonder whether:

a.) it is simply they haven't paid the hosting bill?
b.) Alternatively, the somebody has left in huff hosting it on their behalf and has simply turned them off?

Let's relax in the knowledge that the site is down so they can't spread their message.

So BNP - We yet again We do not believe you!

Landale


propagation of nameservers depends on the "TTL" setting

16.08.2009 15:34

I agree with tab's analysis - there is no conspiracy here. Probably just some anti-fascists bringing down the website when most of the BNP will be away at the festival.

The time taken for nameserver changes to propagate depends on the "time-to-live" or TTL setting in the domain name record. 4 hours doesn't seem improbable to me; in fact it seems quite quick.

@n@rchog33k


I do not believe a word of it. Nor does their ISP

16.08.2009 16:52

Web metrics Showing Traffic Analysis for BNP.ORG.UK
Web metrics Showing Traffic Analysis for BNP.ORG.UK

This is yet another cynical attempt by the leadership to extract money from the rank and file. The traffic analysis for the web site shows that traffic to the BNPs odious site is dropping.

The page ranking is as follows:

Yesterday 29,437
7 day avg 39,170
1 month avg 39,736
3 month avg 27,359

3 month change -18,509


So, if there is a DDoS going on, it must have been going on for more than seven days. In addition it must be working by reduction of traffic to the site (by a massive 74% over three months). Because the page ranking measures traffic into the site. The problem being that on the day when the server is "offline" there is a slight rise in traffic. The rise is actually smaller than historical traffic levels. Easily explained by visitors not getting the webpage they were expecting and hence trying to visit again.

The arrival direction for visitors are as follows:

21.35% google.co.uk 12.89% google.com 7.45% bbc.co.uk 6.16% thesun.co.uk 6.02% facebook.com 5.30% youtube.com 5.16% intensedebate.com 4.87% simondarby.blogspot.com 4.58% yahoo.com 3.58% telegraph.co.uk

Which shows no "Cadre of Russian Zombie Machines"

Once visited, the downstream destinations are as follows:

25.44% google.co.uk 10.36% google.com 6.80% youtube.com 6.36% bbc.co.uk 5.92% intensedebate.com 4.88% digg.com 4.59% facebook.com 4.14% simondarby.blogspot.com 3.99% yahoo.com 2.66% twitter.com

If further proof were needed, the ranking in other countries are as follows:
646 Bahamas 189,223 Germany 71,903 India 85,231 Indonesia 5,879 Ireland 162,420 Italy 32,051 Japan 48,814 Netherlands 43,427 Pakistan 15,723 South Africa 1,676 United Kingdom 248,782 United States

Which fails to mention Russia.


Percent of Global Internet users who visit bnp.org.uk:
Yesterday 0.0041%
7 day avg 0.0034%
1 month avg 0.00322%
3 month avg 0.0043%
3 month change -74%

27,359
Traffic Rank A measure of a website's popularity.

The rank is calculated using a combination of average daily visitors and pageviews over the past 3 months. The site with the highest combination of visitors and pageviews is ranked #1.
So traffic is up but not on the three month average. The server should be able to cope. The most telling statistic is this:

Average Load Time for Bnp.org.uk
Very Slow (10.954 Seconds), 96% of sites are faster.


Nick Griffins Accountant


I admire your tenacity, but we are just guessing here

16.08.2009 18:10

I admire your tenacity, Nick Griffin's Accountant, but we don't really know all the details here and are just guessing.

Why would it be so bad if there was a denial of service attack on their site? Would it be better if it were just an administrative or technical fuckup on their part?

I don't think the Alexa report will tell you anything, to be honest. We don't know exactly what the DoS attack is. It could be just a flood of UDP packets, which I don't think would show up in Alexa's stats anyway.

 http://www.alexa.com/siteinfo/bnp.org.uk

Looking at how Alexa gets this information, it is mostly from people who have installed Alexa's spyware (*ahem* I mean toolbar) in their browser:  http://www.alexa.com/help/traffic-learn-more

And I doubt that the DoSing machines are using web browsers at all, let alone ones with the Alexa toolbar installed. They are probably just an army of bots on compromised machines, each running the DoS program and controlled from an IRC channel or similar.

I'm quite happy to take the BNP's claim at face value and applaud the people who are taking the time to sabotage their website.

@n@rchog33k


guessing?

16.08.2009 22:53

Nick accountant,

Your coming out with utter bollox. Just spouting figures out with no concept of what they are. Unless you've got access to the server stats or whatever analytics they have on their site then you are inaccurate

Go back to stamp collecting

oakfre


@oakfre

17.08.2009 02:24


can you prove I am bullshitting?

Web analytics are really easy to come by. Finding out what the BNP website looked like in 2007 is also easy to come by. Wake up and join the real world. The BNP website is easy to analyse: it is a website promoting fascism. What could be less clear.

Maybe you need the same sort of statistics for stomfront?

Yesterday 9,568
7 day avg 10,178
1 month avg 11,467
3 month avg 13,046
3 month change -1,231


Upstream Sites
Percent of total visits to stormfront.org preceded by a visit to the upstream site.

28.79% google.com
7.31% youtube.com
5.44% google.co.uk
4.17% wikipedia.org
3.92% yahoo.com
2.55% google.ca
2.11% google.nl
1.96% bbc.co.uk
1.72% facebook.com
1.52% google.be

Downstream Sites
Percent of total visits to stormfront.org followed by a visit to the downstream site.

25.90% google.com
9.42% youtube.com
4.45% google.co.uk
4.34% wikipedia.org
3.98% yahoo.com
2.30% facebook.com
1.99% bbc.co.uk
1.99% google.ca
1.88% google.nl
1.52% dailymail.co.uk

More sites link to stormfront than the BNP. Just goes to show - The pension plan may not be as secure as it could be. Another graph of interest, shows the relationship between indymedia, stormfront and the BNP. The BNP comes bottom.

Nick Griffins Accountant


The verity of Alexa

17.08.2009 02:43

@n@rchog33k,

yes, you are correct: the exact circumstances of the loss of service are not publically known. However, the Alexa statistics are accurate enough to support a number of claims - such as the general level of traffic now is lower than the last "server replacement". If the is or was a DDoS then it would reflect in the traffic analysis. The traffic analysis is unlikely to say "up one million hits" but the truth is Alexa offers a good enough service to give direction to investigations. I can imagine that the denial of service consists of a drunken bonehead screaming from a locked room - "this is my machine, keep away".

The Alexa toolbar is not the only source of sampling. It has inherent limitations - such as being restricted to monitoring windows originated traffic. But it does employ a reasonably sophisticated sampling technique that give a fairly reliable indication of wher MAINSTREAM Internet users are looking. For the BNP it is the mainstream that counts. The BNP is in a ghetto of its own creation and it is finding it harder to struggle out than Stormfront. The truth about the statistics are that the BNP site is not attractive to the internet.

Alexa statistics can randomly fluctuate by about 10% for no apparent reason. This is apparent for sites ranked below 100,000 because the graph peaks and troughs. This means that daily statistics are much less useful than yearly or quarterly. One of the know cause of this fluctuation is internal site editing.

Rather than speculating about all the possible ways of bringing the BNP website to its knees, just consider the old fashioned methods: give a bonehead a beer (works frequently) or simply trip over the plug (less frequently) or even forget to pay the bill.

There are more reliable sources of non invasive web metrics. But it would hardly be sensible to mention them here.

Nick Griffins Accountant


Mystery Over.....

17.08.2009 07:47

The IP Address has changed and the host has changed to:

Your IP address is 174.36.63.243
City: Dallas
Country: United States
Continent: North America
Time Zone: CST

It was UK based so I guess they're getting bailed out by US friends, did they fail to pay the bill this side of the pond? - It was pretty much 14 days after the end of the month when this occurred and this is pretty much an industry standard for a cutoff.

Ho hum, the name has moved but no site yet, just a place holder - hopefully they've no backup and the stories of a fallout are true.

Landale


Whatever happened to....

17.08.2009 09:07

The British Jobs for British workers mantra?

Surely British servers for British websites is also true............... outsourcing their webshite now..... whatever next........... Membership hotline relocated to Delhi?


They really are crap.... LoL

Bob


site back online

17.08.2009 17:41

The bnp site is now online, I wonder if it is possible to keep it offline 24/7? does anyone know?

AR


Offline/Online

17.08.2009 20:00

If anybody can find anything that is illegal in Texas and is on the BNP website then it would be grounds for the ISP shutting the website down.

The ISP have a commitment to "first amendment rights" do not attack the freedom of speech angle.

The BNP have attacked Scientology - which is an unexplored avenue. Getting the Church of Scientology to litigate against the BNP in Texas should not be too difficult as they BNP are fascists.

The dubious nature of several BNP members to underage women might also provide an approach as the ISP has a zero tolerance to child pronography. Remember the age of consent is 18 in many US States. Being foreign is not an acceptable excuse.

Finally, the Southern Poverty Law Center has repeatedly reported that the BNP are a "Race Hate Group" and so it might be reasonable to contact them with details of the BNP hosting arrangement.

Nick Griffins Accountant


@ Prick Gri££ins accountant...

18.08.2009 06:32

Cock rings. Anal plugs. Nipple clamps. Dildos. - cannot be bought sold or exchanged in Texas..... so that pretty much wraps up the BNP hierarchy.
 http://www.austinchronicle.com/gyrobase/Issue/story?oid=oid%3A78186


Bob


its summer

18.08.2009 16:50

over 50, got lots of spare money and too much time on our hands?
maybe we need to get out more

helo