News:

... welcome to the Club Arnage Le Mans forum ...

Main Menu

Who Pulled the Plug?

Started by Robspot, January 24, 2008, 01:01:07 PM

Previous topic - Next topic

Robspot

The site's been down since last night. It's bloody terrible, I've actually had to do some work this morning. Gonna have to have a lie down now.
I always stay too long. Long enough for something to go wrong

Christopher


Quote from: robspot on January 24, 2008, 01:01:07 PM
........I've actually had to do some work this morning.......

I agree, darn frustrating.

Le Mans is for the week......not just 24hrs!

When life throws you lemons, bring out the tequila!!

Vodka! Cheaper than Botox and paralyses more muscles!

Kev_mk3

me aswell - well more work than usual!  ::)

Kev_mk3

#3
Quote from: Ferrari Spyder on January 24, 2008, 03:12:17 PM
group hug ::)
::) errrrrrr no  :laugh:


**edit**


ok as im a young en ive been told to get with the flow - hug anyone :laugh:  :P

DJet

Sorry for the outage folks.

Neither the machine itself, nor the software was actually down, but some %¤$  /#¤&"%!  had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts - but obviously brute-force:

Jan 20 16:56:21 www sshd[63392]: Illegal user rabbit from 200.25.183.58
Jan 20 16:56:23 www sshd[63392]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
Jan 20 16:56:32 www sshd[63395]: Illegal user notes from 200.25.183.58
Jan 20 16:56:34 www sshd[63395]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!

repeated a million times, from different hosts, different users etc etc.
Luckily, the storm actually stopped last night.

Apart from draining the machines remaining resources, it filled up the filesystem containing the logs.

/Djet

Christopher

Quote from: DJet on January 24, 2008, 04:15:18 PM
Sorry for the outage folks.

Neither the machine itself, nor the software was actually down, but some %¤$  /#¤&"%!  had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts - but obviously brute-force:

Jan 20 16:56:21 www sshd[63392]: Illegal user rabbit from 200.25.183.58
Jan 20 16:56:23 www sshd[63392]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
Jan 20 16:56:32 www sshd[63395]: Illegal user notes from 200.25.183.58
Jan 20 16:56:34 www sshd[63395]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!

repeated a million times, from different hosts, different users etc etc.
Luckily, the storm actually stopped last night.

Apart from draining the machines remaining resources, it filled up the filesystem containing the logs.

/Djet

??? That made total sense to me.  ???

But thanks for the explanation.

At least everything is up and running.......I can now join the panic about camping tickets.  ;D

Le Mans is for the week......not just 24hrs!

When life throws you lemons, bring out the tequila!!

Vodka! Cheaper than Botox and paralyses more muscles!

geoffd

Quote from: DJet on January 24, 2008, 04:15:18 PM
Sorry for the outage folks.

Neither the machine itself, nor the software was actually down, but some %¤$  /#¤&"%!  had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts - but obviously brute-force:

Jan 20 16:56:21 www sshd[63392]: Illegal user rabbit from 200.25.183.58
Jan 20 16:56:23 www sshd[63392]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
Jan 20 16:56:32 www sshd[63395]: Illegal user notes from 200.25.183.58
Jan 20 16:56:34 www sshd[63395]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!

repeated a million times, from different hosts, different users etc etc.
Luckily, the storm actually stopped last night.

Apart from draining the machines remaining resources, it filled up the filesystem containing the logs.

/Djet

Sounds like either a denial of service attack or a hack attempt to me....
Of course I buy green cars, my Aston is green, my MGB is green, my Disco Sport is green,  oh, that's not what you meant by green?

Paddy_NL

whoever put the plug back in, has replaced it with a darn slow one :-\
Paddy's 2009: Spa LMS • NBR 24 • Le Mans 24 • Spa24NBR LMSSilverstone LMS =(

Drinking for Holland

Petra

Quote from: DJet on January 24, 2008, 04:15:18 PM
but some %¤$  /#¤&"%!  had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts

Ahh, thank god for those nice young ladies opening every attachment that has the word "cute" in it and those nice boys and men hungry for porn. They gave you all an opportunity to eat something and actually talk to people in real life :D Without them you'd be stuck on here 24/7. Damn those idiots trying to teach people about anti virus programs, firewalls and firefox  >:(
2 cats, 6 rabbits, 2 guinea pigs, lots of mice, 1 syrian hamster, 1 chinchilla, a lot of fun!