Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
linux-noob.com inaccessible last night
#1

last night for some time linux-noob.com was inaccessible, and here's why, the nameservers that point the ip to linux-noob.com was being DDOS'd...

 

Quote:Posted by davidu at 12:52pm PST on 9-28-2006 

Latest Update: Our webserver just got way overloaded and was pretty hard to access over the last couple hours. I've rebooted the machine and it's doing fine. I'll monitor the machine and we're going to ensure that it's stable. We will also ensure a failover webserver is properly configured in the future at a different location. There was no DNS outage during this problem as the web server does nothing besides serve webpages and do some email for us.
[/url]http://www.everydns.net/news.php 

and see below (email from me to the person who runs everydns.net)

 

 

 

Quote:last night my websites experienced downtime due to the inability to contact your nameservers, 

I've read your updates here

 

\Posted by davidu at 12:52pm PST on 9-28-2006

 

Latest Update: Our webserver just got way overloaded and was pretty hard to access over the last couple hours. I've rebooted the machine and it's doing fine. I'll monitor the machine and we're going to ensure that it's stable. We will also ensure a failover webserver is properly configured in the future at a different location. There was no DNS outage during this problem as the web server does nothing besides serve webpages and do some email for us.

\

 

where you say there was no DNS outage,

 

well I was experiencing it, so that's why I'm emailing you, on IRC I asked a few friends from different parts of the world to ping linux-noob.com (they couldnt) and then to ping the everydns name servers (they couldnt)

 

you can see snippets of that conversation below

 

so, this email is to wish you good luck in fixing this issue and also to inform you that DNS was inaccesible for me and others last night.

 

<web_any> cmon game on ?

Dec 01 22:27:54 <web_any> who wants a frag

Dec 01 22:28:01 <znx> web_any: so ..

Dec 01 22:28:07 <znx> linux-noob.com is down?

Dec 01 22:28:53 <znx> hayig2000: you can use utilities like partition magic .. which make it really easy (this is in windows)

Dec 01 22:29:34 <hayig2000> logical...extented...basic partitions!!!

Dec 01 22:29:39 <bofhwork> works from here znx

Dec 01 22:29:48 <web_any> works fine here too

Dec 01 22:29:48 <hayig2000> thats a miss

Dec 01 22:30:09 <web_any> znx i mean use linux-noob.com's ip for quake3

Dec 01 22:30:16 <web_any> pls play cmon

Dec 01 22:30:19 <web_any> lets frag

Dec 01 22:30:29 <FluKex> boobies

Dec 01 22:30:31 <supababe> i will join soon

Dec 01 22:30:40 <supababe> frag joe for a bit first

Dec 01 22:30:49 <supababe> max 30 mins, is benja is sleeping, i will come

Dec 01 22:30:58 <bofhwork> mmm, boobies

Dec 01 22:31:51 <web_any> hes lagging

Dec 01 22:31:55 <znx> web_any: no ..

Dec 01 22:31:57 <znx> i mean

Dec 01 22:32:01 <znx> linux-noob.com is down

Dec 01 22:32:11 <znx> i cant connect

Dec 01 22:32:13 <web_any> no its not

Dec 01 22:32:27 <znx> it doesnt connect for me .. simply times out

Dec 01 22:32:27 --> mare (~y2ollo@80.178.203.251.adsl.012.net.il) has joined #linux-noob

Dec 01 22:32:38 <mare> hey, how can i restart httpd on freebsd

Dec 01 22:32:46 <mare> do i have to kill its pid and run it again

Dec 01 22:32:47 --> Varjagy (~varjagy@128.39.124.91) has joined #linux-noob

Dec 01 22:32:50 <mare> its apache22

Dec 01 22:32:59 <znx> mare: its normally under the /usr/local/etc/init.d/apache22.sh

Dec 01 22:33:07 <znx> so you do /usr/local/etc/init.d/apache22.sh restart

Dec 01 22:33:11 <znx> iirc

Dec 01 22:33:18 <supababe> can he not play?

Dec 01 22:33:25 <mare> thanks

Dec 01 22:34:30 <hayig2000> where to get more information about partitioning?

Dec 01 22:34:41 <web_any> is linux-noob.com down for anyone else ?

Dec 01 22:34:59 <sparkies> works here

Dec 01 22:35:12 <znx> hayig2000: do you have an empty disk .. or did i miss that [img]<___base_url___>/uploads/emoticons/default_ohmy.png[/img]

Dec 01 22:35:13 <web_any> yeah we are local...

Dec 01 22:35:15 <grep> not working here

Dec 01 22:35:17 <web_any> bofhwork,

Dec 01 22:35:20 <web_any> FluKex,

Dec 01 22:35:22 <web_any> grep,

Dec 01 22:35:25 <jY> doesn't work

Dec 01 22:35:26 <grep> dns not resolving

Dec 01 22:35:30 <web_any> ok

Dec 01 22:35:30 <znx> same here

Dec 01 22:35:53 <web_any> did it work earlier ?

Dec 01 22:35:56 <znx> yes

Dec 01 22:35:57 <sparkies> http://tmbo.org/offensive/2006/12/01/image...e%20Hacking.jpg

Dec 01 22:35:59 <kutzooi> http://b.oooom.net/b6u

Dec 01 22:36:01 <sparkies> sfw

Dec 01 22:36:04 <znx> i was there earlier today web_any

Dec 01 22:36:10 <web_any> hrm

Dec 01 22:36:14 <web_any> one sec.

Dec 01 22:36:15 <hayig2000> i have an empty partition...

Dec 01 22:36:57 <web_any> is it working now

Dec 01 22:37:27 <znx> **nslookup www.linux-noob.com

Dec 01 22:37:36 <znx> web_any: you can test it via my bot ..

Dec 01 22:37:39 <znx> its not btw

Dec 01 22:37:57 <linuxgirl> I can't find www.linux-noob.com in DNS

Dec 01 22:38:11 <web_any> wtf bullshit is this

Dec 01 22:38:26 <web_any> what ip does it resolve to

Dec 01 22:38:28 <web_any> via ping

Dec 01 22:38:37 <supababe> i get in but i am local

Dec 01 22:38:53 <FluKex> ping www.linux-noob.com

Dec 01 22:38:53 <FluKex> ping: unknown host www.linux-noob.com

Dec 01 22:39:00 <FluKex> no A record

Dec 01 22:39:03 <znx> web_any: its not resolving .. so i have nothing to ping

Dec 01 22:39:41 <znx> hayig2000: what is the empty partition .. is it formatted or unallocated?

Dec 01 22:40:18 <web_any> that is totally shit

Dec 01 22:40:26 --- l0rd sets channel limit to 96

Dec 01 22:40:28 <web_any> ok what about [url=http://anyweb.kicks-ass.net]http://anyweb.kicks-ass.net

Dec 01 22:40:41 <znx> bing .. straight in

Dec 01 22:40:42 <FluKex> that works

Dec 01 22:40:54 <FluKex> looks like everydns is broken

Dec 01 22:41:02 <FluKex> none of their serves are responding

Dec 01 22:41:08 <FluKex> and linux-noob is run by them

Dec 01 22:41:10 <web_any> ok thats it then

Dec 01 22:41:13 <web_any> they are my dns

Dec 01 22:41:19 <web_any> for linux-noob

Dec 01 22:41:31 <web_any> kicks-ass is dyndns

Dec 01 22:41:32 <web_any> ...

Dec 01 22:41:34 <web_any> shit

Dec 01 22:41:35 <FluKex> not according to whois

Dec 01 22:41:36 <FluKex> ns1.everydns.net

Dec 01 22:41:36 <FluKex> ns2.everydns.net

Dec 01 22:41:36 <FluKex> ns3.everydns.net

Dec 01 22:41:36 <FluKex> ns4.everydns.net

Dec 01 22:41:41 <-- hayig2000 has quit (Read error: Connection reset by peer)

Dec 01 22:41:43 <FluKex> thats what your domain points to in the whois db

Dec 01 22:41:48 <FluKex> so those servers control your dns

Dec 01 22:41:53 <web_any> that's for linux-noob.com

Dec 01 22:42:09 <znx> FluKex: yeah i cant even get them to repsond .. they are dead

Dec 01 22:42:21 <znx> Nameserver ns1.everydns.net not responding

Dec 01 22:42:22 <FluKex> znx me either

Dec 01 22:42:27 <FluKex> i tried em all

Dec 01 22:42:29 <supababe> panic

Dec 01 22:42:30 * znx nods

Dec 01 22:42:36 <web_any> ok

Dec 01 22:42:40 <FluKex> cant even get to everydns.net

Dec 01 22:42:42 <web_any> they have the issue so
Reply
#2

Yeah they experienced a DoS attack, which left them with one very difficult task of attempting to filter the bad out to let the good in.

 

Shame about that.

Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)