Who Pulled the Plug?

[Robspot]

The site's been down since last night. It's bloody terrible, I've actually had to do some work this morning. Gonna have to have a lie down now.

[Christopher]

........I've actually had to do some work this morning.......

I agree, darn frustrating.

[Kev_mk3]

me aswell - well more work than usual! 

[Kev_mk3]

group hug

errrrrrr no 


**edit**

ok as im a young en ive been told to get with the flow - hug anyone  

[DJet]

Sorry for the outage folks.

Neither the machine itself, nor the software was actually down, but some %¤$  /#¤&"%!  had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts - but obviously brute-force:

Jan 20 16:56:21 www sshd[63392]: Illegal user rabbit from 200.25.183.58
Jan 20 16:56:23 www sshd[63392]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
Jan 20 16:56:32 www sshd[63395]: Illegal user notes from 200.25.183.58
Jan 20 16:56:34 www sshd[63395]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!

repeated a million times, from different hosts, different users etc etc.
Luckily, the storm actually stopped last night.

Apart from draining the machines remaining resources, it filled up the filesystem containing the logs.

/Djet

[Christopher]

Sorry for the outage folks.

Neither the machine itself, nor the software was actually down, but some %¤$  /#¤&"%!  had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts - but obviously brute-force:

Jan 20 16:56:21 www sshd[63392]: Illegal user rabbit from 200.25.183.58
Jan 20 16:56:23 www sshd[63392]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
Jan 20 16:56:32 www sshd[63395]: Illegal user notes from 200.25.183.58
Jan 20 16:56:34 www sshd[63395]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!

repeated a million times, from different hosts, different users etc etc.
Luckily, the storm actually stopped last night.

Apart from draining the machines remaining resources, it filled up the filesystem containing the logs.

/Djet

  That made total sense to me. 

But thanks for the explanation.

At least everything is up and running.......I can now join the panic about camping tickets. 

[geoffd]

Sorry for the outage folks.

Neither the machine itself, nor the software was actually down, but some %¤$  /#¤&"%!  had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts - but obviously brute-force:

Jan 20 16:56:21 www sshd[63392]: Illegal user rabbit from 200.25.183.58
Jan 20 16:56:23 www sshd[63392]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!
Jan 20 16:56:32 www sshd[63395]: Illegal user notes from 200.25.183.58
Jan 20 16:56:34 www sshd[63395]: reverse mapping checking getaddrinfo for 58.25-183.uio.satnet.net failed - POSSIBLE BREAKIN ATTEMPT!

repeated a million times, from different hosts, different users etc etc.
Luckily, the storm actually stopped last night.

Apart from draining the machines remaining resources, it filled up the filesystem containing the logs.

/Djet

Sounds like either a denial of service attack or a hack attempt to me....

[Paddy_NL]

whoever put the plug back in, has replaced it with a darn slow one

[Petra]

but some %¤$  /#¤&"%!  had pointed his bot-net towards the poor little machine and done a million brute-force login attempts from about 50.000 different hosts

Ahh, thank god for those nice young ladies opening every attachment that has the word "cute" in it and those nice boys and men hungry for porn. They gave you all an opportunity to eat something and actually talk to people in real life Without them you'd be stuck on here 24/7. Damn those idiots trying to teach people about anti virus programs, firewalls and firefox