A day after the US Web sites of Yahoo were targeted with a denial of service attack, Amazon.com, eBay and Buy.com have all said problems experienced by their Web sites yesterday were due to similar attacks.
An attack by hackers left users of the four Web giants facing "denial of service" messages, something the hackers achieved by overloading the sites. In these attacks, routers connecting the sites to the rest of the Internet have been flooded with so much fake traffic that the router becomes unable to cope. Once this is achieved and the site is overloaded, genuine users find themselves unable to get connections.
IPOverload First to be hit was Buy.com, which saw its Web site become virtually inaccessible just hours after the company successfully completed an initial public offering on the Nasdaq market in New York.
"At 10:50am PST our site experienced a slowdown due to a denial of service attack," said Buy.com in a statement attributed to chief executive officer Greg Hawkins.
"We had 800M bits per second hit the site, which equals eight times our capacity. On average, our site runs at only 30 per cent capacity, which gives you an idea of how unprecedented this traffic hit was. Our support staff reacted immediately, our systems performed exactly as they should have. It was strictly an outside co-ordinated attack to our network that prevented access to our system."
A Buy.com spokeswoman said the company's Web site was hosted with Exodus Communications and that the two companies were working together to discover as much as they could regarding the incident, but the company was "absolutely positive" the problem was a result of a malicious attack.
Bay sunk Later in the day it was the turn of Internet auction house eBay.
"We are experiencing an external denial of service attack," said eBay Inc. spokeswoman Jennifer Chu, speaking while the attack, which began at 3 p.m. PST (Pacific Standard Time), was continuing late yesterday.
"We are working with local and federal authorities, our Internet provider, ISPs (Internet service providers) and other Internet sites that have been attacked," she added. The spokeswoman said the attack affected its servers hosted at a data centre run by AboveNet Communications, a unit of Metromedia Fiber Network.
The servers carried eBay's static pages - those that are not being continuously updated, such as its main home page and company profile - while the dynamic pages, which are hosted by a different company, were unaffected. This enabled the company to claim that the majority of its site was up and running, but in reality it meant that users could not reach the functioning pages, which include those associated with bidding, listing and searching, unless they had bookmarks that enabled them to bypass the home page.
Amazonked Two hours later, at 5 p.m. PST, high-profile Internet retailer Amazon.com was attacked, the company said.
"Today, like several other major internet sites, Amazon.com came under a denial of service attack," spokesman Bill Curry said, reading from a prepared statement. "A large amount of junk traffic was directed to our site resulting in degraded service for about one hour."
At around the same time, the Web site of CNN also saw performance take a dive, said Dan Todd, director of public services at Internet performance measurement specialists Keynote Systems. The company saw performance at the CNN site, which is usually above 95 per cent, drop to 18 per cent in the period from 4 p.m. to 4:15 p.m. PST and then drop further still to hit zero per cent between 5 p.m. and 5:15 p.m.
A spokesperson for CNN Interactive was not immediately available for comment.
Yahoo-do The attacks came a day after several of the US Web sites of Yahoo Inc. were hit by a similar assault. At the time, a company spokeswoman described the attack as co-ordinated, coming from multiple points on the Internet, and said the amount of traffic directed at a router connecting the site to the Internet was "intense."
The attack, coming as it did in the middle of the US business day, is likely to have affected millions of users.
Together, Yahoo's family of Web sites attracted 42.4 million unique visitors in December 1999, according to Web audience measurement firm MediaMetrix. This made it the second most popular Web family on the Internet after those of America Online.
The Yahoo spokesperson was keen to emphasize that no user data was compromised during the attack, and that its Web sites and systems were at no time hacked.