Title: Who Pulled the Plug?
Post by: Robspot on January 24, 2008, 01:01:07 pm
The site's been down since last night. It's bloody terrible, I've actually had to do some work this morning. Gonna have to have a lie down now.
Title: Re: Who Pulled the Plug?
Post by: Christopher on January 24, 2008, 01:32:34 pm
........I've actually had to do some work this morning.......
I agree, darn frustrating.
Title: Re: Who Pulled the Plug?
Post by: Kev_mk3 on January 24, 2008, 01:38:19 pm
me aswell - well more work than usual! ::)
Title: Re: Who Pulled the Plug?
Post by: Kev_mk3 on January 24, 2008, 03:46:52 pm
group hug ::)
::) errrrrrr no :laugh:**edit**
ok as im a young en ive been told to get with the flow - hug anyone :laugh: :P
Title: Re: Who Pulled the Plug?
Post by: DJet on January 24, 2008, 04:15:18 pm
Sorry for the outage folks.
Neither the machine itself, nor the software was actually down, but some %¤$ /#¤&"%! had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts - but obviously brute-force:
Jan 20 16:56:21 www sshd[63392]: Illegal user rabbit from 200.25.183.58
Jan 20 16:56:23 www sshd[63392]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
Jan 20 16:56:32 www sshd[63395]: Illegal user notes from 200.25.183.58
Jan 20 16:56:34 www sshd[63395]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
repeated a million times, from different hosts, different users etc etc.
Luckily, the storm actually stopped last night.
Apart from draining the machines remaining resources, it filled up the filesystem containing the logs.
/Djet
Neither the machine itself, nor the software was actually down, but some %¤$ /#¤&"%! had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts - but obviously brute-force:
Jan 20 16:56:21 www sshd[63392]: Illegal user rabbit from 200.25.183.58
Jan 20 16:56:23 www sshd[63392]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
Jan 20 16:56:32 www sshd[63395]: Illegal user notes from 200.25.183.58
Jan 20 16:56:34 www sshd[63395]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
repeated a million times, from different hosts, different users etc etc.
Luckily, the storm actually stopped last night.
Apart from draining the machines remaining resources, it filled up the filesystem containing the logs.
/Djet
Title: Re: Who Pulled the Plug?
Post by: Christopher on January 24, 2008, 04:28:42 pm
Sorry for the outage folks.
Neither the machine itself, nor the software was actually down, but some %¤$ /#¤&"%! had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts - but obviously brute-force:
Jan 20 16:56:21 www sshd[63392]: Illegal user rabbit from 200.25.183.58
Jan 20 16:56:23 www sshd[63392]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
Jan 20 16:56:32 www sshd[63395]: Illegal user notes from 200.25.183.58
Jan 20 16:56:34 www sshd[63395]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
repeated a million times, from different hosts, different users etc etc.
Luckily, the storm actually stopped last night.
Apart from draining the machines remaining resources, it filled up the filesystem containing the logs.
/Djet
Neither the machine itself, nor the software was actually down, but some %¤$ /#¤&"%! had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts - but obviously brute-force:
Jan 20 16:56:21 www sshd[63392]: Illegal user rabbit from 200.25.183.58
Jan 20 16:56:23 www sshd[63392]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
Jan 20 16:56:32 www sshd[63395]: Illegal user notes from 200.25.183.58
Jan 20 16:56:34 www sshd[63395]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
repeated a million times, from different hosts, different users etc etc.
Luckily, the storm actually stopped last night.
Apart from draining the machines remaining resources, it filled up the filesystem containing the logs.
/Djet
??? That made total sense to me. ???
But thanks for the explanation.
At least everything is up and running.......I can now join the panic about camping tickets. ;D
Title: Re: Who Pulled the Plug?
Post by: geoffd on January 24, 2008, 04:44:26 pm
Sorry for the outage folks.
Neither the machine itself, nor the software was actually down, but some %¤$ /#¤&"%! had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts - but obviously brute-force:
Jan 20 16:56:21 www sshd[63392]: Illegal user rabbit from 200.25.183.58
Jan 20 16:56:23 www sshd[63392]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
Jan 20 16:56:32 www sshd[63395]: Illegal user notes from 200.25.183.58
Jan 20 16:56:34 www sshd[63395]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
repeated a million times, from different hosts, different users etc etc.
Luckily, the storm actually stopped last night.
Apart from draining the machines remaining resources, it filled up the filesystem containing the logs.
/Djet
Neither the machine itself, nor the software was actually down, but some %¤$ /#¤&"%! had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts - but obviously brute-force:
Jan 20 16:56:21 www sshd[63392]: Illegal user rabbit from 200.25.183.58
Jan 20 16:56:23 www sshd[63392]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
Jan 20 16:56:32 www sshd[63395]: Illegal user notes from 200.25.183.58
Jan 20 16:56:34 www sshd[63395]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
repeated a million times, from different hosts, different users etc etc.
Luckily, the storm actually stopped last night.
Apart from draining the machines remaining resources, it filled up the filesystem containing the logs.
/Djet
Sounds like either a denial of service attack or a hack attempt to me....
Title: Re: Who Pulled the Plug?
Post by: Paddy_NL on January 25, 2008, 07:53:37 pm
whoever put the plug back in, has replaced it with a darn slow one :-\
Title: Re: Who Pulled the Plug?
Post by: Petra on January 25, 2008, 10:23:36 pm
but some %¤$ /#¤&"%! had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts
Ahh, thank god for those nice young ladies opening every attachment that has the word "cute" in it and those nice boys and men hungry for porn. They gave you all an opportunity to eat something and actually talk to people in real life :D Without them you'd be stuck on here 24/7. Damn those idiots trying to teach people about anti virus programs, firewalls and firefox >:(
