|
Robspot
|
 |
« on: January 24, 2008, 01:01:07 pm » |
|
The site's been down since last night. It's bloody terrible, I've actually had to do some work this morning. Gonna have to have a lie down now.
|
|
|
|
|
Logged
|
I always stay too long. Long enough for something to go wrong
|
|
|
|
Christopher
|
|
« Reply #1 on: January 24, 2008, 01:32:34 pm » |
|
........I've actually had to do some work this morning.......
I agree, darn frustrating. |
|
|
|
|
Logged
|
Le Mans is for the week......not just 24hrs!
When life throws you lemons, bring out the tequila!!
Vodka! Cheaper than Botox and paralyses more muscles!
|
|
|
|
Kev_mk3
|
|
« Reply #2 on: January 24, 2008, 01:38:19 pm » |
|
me aswell - well more work than usual!  |
|
|
|
|
Logged
|
|
|
|
|
Kev_mk3
|
|
« Reply #3 on: January 24, 2008, 03:46:52 pm » |
|
|
|
|
|
« Last Edit: January 24, 2008, 03:54:06 pm by Kev_mk3 »
|
Logged
|
|
|
|
|
DJet
|
|
« Reply #4 on: January 24, 2008, 04:15:18 pm » |
|
Sorry for the outage folks.
Neither the machine itself, nor the software was actually down, but some %¤$ /#¤&"%! had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts - but obviously brute-force:
Jan 20 16:56:21 www sshd[63392]: Illegal user rabbit from 200.25.183.58
Jan 20 16:56:23 www sshd[63392]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
Jan 20 16:56:32 www sshd[63395]: Illegal user notes from 200.25.183.58
Jan 20 16:56:34 www sshd[63395]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
repeated a million times, from different hosts, different users etc etc.
Luckily, the storm actually stopped last night.
Apart from draining the machines remaining resources, it filled up the filesystem containing the logs.
/Djet
|
|
|
|
|
Logged
|
|
|
|
|
Christopher
|
|
« Reply #5 on: January 24, 2008, 04:28:42 pm » |
|
Sorry for the outage folks.
Neither the machine itself, nor the software was actually down, but some %¤$ /#¤&"%! had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts - but obviously brute-force:
Jan 20 16:56:21 www sshd[63392]: Illegal user rabbit from 200.25.183.58
Jan 20 16:56:23 www sshd[63392]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
Jan 20 16:56:32 www sshd[63395]: Illegal user notes from 200.25.183.58
Jan 20 16:56:34 www sshd[63395]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
repeated a million times, from different hosts, different users etc etc.
Luckily, the storm actually stopped last night.
Apart from draining the machines remaining resources, it filled up the filesystem containing the logs.
/Djet
 That made total sense to me. But thanks for the explanation. At least everything is up and running.......I can now join the panic about camping tickets.  |
|
|
|
|
Logged
|
Le Mans is for the week......not just 24hrs!
When life throws you lemons, bring out the tequila!!
Vodka! Cheaper than Botox and paralyses more muscles!
|
|
|
|
geoffd
|
|
« Reply #6 on: January 24, 2008, 04:44:26 pm » |
|
Sorry for the outage folks.
Neither the machine itself, nor the software was actually down, but some %¤$ /#¤&"%! had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts - but obviously brute-force:
Jan 20 16:56:21 www sshd[63392]: Illegal user rabbit from 200.25.183.58
Jan 20 16:56:23 www sshd[63392]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
Jan 20 16:56:32 www sshd[63395]: Illegal user notes from 200.25.183.58
Jan 20 16:56:34 www sshd[63395]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
repeated a million times, from different hosts, different users etc etc.
Luckily, the storm actually stopped last night.
Apart from draining the machines remaining resources, it filled up the filesystem containing the logs.
/Djet
Sounds like either a denial of service attack or a hack attempt to me.... |
|
|
|
|
Logged
|
Of course I buy green cars, my Aston is green, my MGB is green, my Disco Sport is green, oh, that's not what you meant by green?
|
|
|
|
Paddy_NL
|
|
« Reply #7 on: January 25, 2008, 07:53:37 pm » |
|
whoever put the plug back in, has replaced it with a darn slow one  |
|
|
|
|
Logged
|
Paddy's 2009: Spa LMS • NBR 24 • Le Mans 24 • Spa24 • NBR LMS • Silverstone LMS =( Drinking for Holland  |
|
|
Petra
Would rather still be a Newbie
CA Veteran
Full Member
 Offline
Posts: 192
DfH member and proud owner of Albert CB!
|
|
« Reply #8 on: January 25, 2008, 10:23:36 pm » |
|
but some %¤$ /#¤&"%! had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts
Ahh, thank god for those nice young ladies opening every attachment that has the word "cute" in it and those nice boys and men hungry for porn. They gave you all an opportunity to eat something and actually talk to people in real life  Without them you'd be stuck on here 24/7. Damn those idiots trying to teach people about anti virus programs, firewalls and firefox  |
|
|
|
|
Logged
|
2 cats, 6 rabbits, 2 guinea pigs, lots of mice, 1 syrian hamster, 1 chinchilla, a lot of fun!
|
|
|
|
