 |
|
February 28th, 2011, 03:38 PM
|
 |
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
So what is it about today's news that has brought on a total of 4 brute force attacks on our server?
edited emails from our server company -
To: flutrackers@earthlink.net
Subject: Brute Force Warning for server.flutrackers.com
Date: Feb 28, 2011 8:15 AM
The following is a summary event for exceeded login failures on server.flutrackers.com:
SOURCE ADDRESS: 116.255.168.14
FAILED LOGINS: 20
-------------------------
To: flutrackers@earthlink.net
Subject: Brute Force Warning for server.flutrackers.com
Date: Feb 28, 2011 4:18 PM
The following is a summary event for exceeded login failures on server.flutrackers.com:
SOURCE ADDRESS: 61.153.21.99
FAILED LOGINS: 32
----------------------------
To: flutrackers@earthlink.net
Subject: Brute Force Warning for server.flutrackers.com
Date: Feb 28, 2011 4:21 PM
The following is a summary event for exceeded login failures on server.flutrackers.com:
SOURCE ADDRESS: 124.229.73.164
FAILED LOGINS: 25
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
March 1st, 2011, 01:16 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
We have had 4 more attacks today and also a new email spam campaign.
The person who is doing this must be very insecure and unhappy.
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
April 20th, 2011, 09:51 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
April 26th, 2011, 02:10 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
April 26th, 2011, 03:03 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
September 26th, 2012, 07:19 AM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
We were down today for about 1.5 hours due to a denial of service attack. The server company is investigating this.
We temporarily switched to our backup site:
FluTrackers.org
please bookmark this site.
If we are down for an extended period of time we will post notices to twitter& facebook
Thanks everyone!
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
December 25th, 2012, 09:49 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
At first look - WOW - we have had a huge December!
So far - 11,302,561 hits from people and an additional 2,367,199 hits from search engine bots - WOW
But Wait... the page view number is off....9,222,050 page views from people...which is more than 71 pages for each visit from the viewers @ 69,608 unique ips.
???
Over 71 pages for the average viewer at each visit??? No way.
We have had a continuing denial of service attack since December 7. I began receiving email notes about excess server load from the server company. Since the traffic was direct links into the site from various ips, it did not appear to be a denial of service attack at first. In fact, the server company suggested after a week that we install the latest vbulletin to better handle our huge traffic. On Friday afternoon, December 20, the server company called me about the continuing excess load.
On Saturday I began to investigate the origin of the traffic to see what topics on FluTrackers were attracting so much attention.
The first thing I saw was the number of hits. Unreal.
Then I saw that China was the country of origin for the excess traffic. And then I discovered all of the traffic was to our registration form. In the past few months about 50+ fake people have signed up to join each day. Then all of a sudden this stopped a couple of weeks ago. Now I know why....they are not bothering to sign up. They have realized that they can not get in.
So now they are flooding the site registration form with direct links. This must be generated by computer. Look at the various ips and the number of pages viewed before I banned them:
61.164.163.138 - 268,355
125.77.148.220 - 250,218
175.44.29.231 - 232,148
175.6.1.99 - 231,047
175.44.24.163 - 201,411
175.44.27.2 - 170,355
59.58.176.46 - 147,363
61.129.51.240 - 143,901
175.44.11.225 - 142,688
112.111.190.221 - 139,224
175.44.26.252 - 103,652
115.210.179.58 - 94,701
This is just the top 12. There are more. This amount of volume can only be generated by a computer program.
Overall pages viewed from China are 7,947,773. !!! Almost all in only 2 weeks.
So why would someone try to overload the site from December 7 through December 21 when I began to ban these ips?
What is the possible motive?
I spent most of Saturday and Sunday taking action to make sure these and other ips can not access the server. Even with this continuous attack we never went down. We have installed various methodologies to prevent down time.
So, whoever you are - you will never take us down. We are not just a site.
We are a phenomenon. People Helping Other People. This Can Not Be Stopped.
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
January 2nd, 2013, 03:30 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
Here are December's final numbers but I have to adjust for the traffic that is a Denial of Service attack: 
| Summary | | | Reported period | Month Dec 2012 | | First visit | 01 Dec 2012 - 00:00 | | Last visit | 31 Dec 2012 - 23:59 | | | Unique visitors | Number of visits | Pages | Hits |
| | Viewed traffic * | 85,297
| 161,230
(1.89 visits/visitor) | 11,377,170
(70.56 Pages/Visit) | 13,992,084
(86.78 Hits/Visit) |
| | Not viewed traffic * |
| 2,835,700 | 3,007,399 |
| |
* Not viewed traffic includes traffic generated by robots, worms
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
January 2nd, 2013, 04:43 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
Already in a little more than 29 hours into 2013 this attack is continuing:
| Summary |
| | Reported period | Month Jan 2013 | | First visit | 01 Jan 2013 - 00:00 | | Last visit | 02 Jan 2013 - 05:12 |
| Unique visitors | Number of visits | Pages | Hits |
| | Viewed traffic * | 4,533
| 5,740
(1.26 visits/visitor) | 241,762
(42.11 Pages/Visit) | 334,815
(58.33 Hits/Visit) |
| | Not viewed traffic * |
| 104,069 | 110,833 |
| |
* Not viewed traffic includes traffic generated by robots, worms
It is not possible that each visit generates a 42 page read. Several ips have already abused us.
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
January 2nd, 2013, 04:52 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
Here are some of the abusive ips and the number of pages they viewed. The first few are all China. I have not looked at all of them yet.
113.72.35.26 -56,775
120.37.208.121 - 46,749
69.46.84.70 27,881 - 27,881
183.26.209.161 - 11,544
183.26.212.228 - 9,151
222.77.227.52 - 6,459
27.155.153.219 - 5,854
205.164.58.7 -5,841
94.242.237.5 - 4,798
14.147.75.166 - 4,680
210.21.68.152 - 4,271
There are more. There is no possibility that any real person has read these many pages on only 29 hours.
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
January 31st, 2013, 09:08 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
US media companies hit by 'Chinese hackers'
Wall Street Journal and New York Times newspapers report that both their computer systems were infiltrated.
Last Modified: 01 Feb 2013 02:22
snip
"Evidence shows that infiltration efforts target the monitoring of the Journal's coverage of China and are not an attempt to gain commercial advantage or to misappropriate customer information," Paula Keve said.
http://www.aljazeera.com/news/americ...842203534.html
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
February 1st, 2013, 10:21 PM
|
 |
Editor, Senior Moderator
|
|
Join Date: Aug 2009
Posts: 20,101
|
|
Re: Continuing Attempts to Thwart FluTrackers
U.S. looking at action against China cyberattacks
Updated: Feb 01, 2013 4:03 PM CST
LOLITA C. BALDOR
Associated Press
...
Richard Bejtlich, the chief security officer at Mandiant, the firm hired by the Times to investigate the cyberattack, said the breach is consistent with what he routinely sees China-based hacking groups do. But, he said it had a personal aspect to it that became apparent: The hackers got into 53 computers but largely looked at the emails of the reporters working on a particular story. The newspaper's investigation delved into how the relatives and family of Premier Wen Jiabao built a fortune worth over $2 billion.
"We're starting to see more cases where there is a personal element," Bejtlich said, adding that it gives companies another factor to consider. "It may not just be the institution, but, is there some aspect of your company that would cause someone on the other side to take personal interest in you?"
Journalists are popular targets, particularly in efforts to determine what information reporters have and who may be talking to them.
The Chinese foreign and defense ministries called the Times' allegations baseless, and the Defense Ministry denied any involvement by the military.
...
Full text:
http://www.fox8live.com/story/20928593/us-looking-at-action-against-china-cyberattacks
__________________
"Safety and security don't just happen, they are the result of collective consensus and public investment. We owe our children, the most vulnerable citizens in our society, a life free of violence and fear."
-Nelson Mandela
|
February 2nd, 2013, 04:23 AM
|
 |
Membro del Comitato Consultivo, Editore e Direttore del Forum Italiano di FluTrackers
|
|
Join Date: Dec 2007
Location: Padua, Italy
Posts: 21,775
|
|
Re: Continuing Attempts to Thwart FluTrackers
I think one of the main hackers' attractor here at FT is H5N1.
In fact, when I post on twitter a link with #H5N1 hashtag the number of 'hits' for the thread literally skyrockets.
This could signal also an individually tagged activity against my account and my links toward FT.
I wonder whether we will have to rename my FT account and / or username/password, emails... 
__________________
G_MICHIELI (aka IRONOREHOPPER)
|
February 2nd, 2013, 09:36 AM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
The hackers gave up trying to get into the server. For years they tried but they never were able to guess the correct user name or password. This is why they now have a computer program to send many requests to look at the registration form. You can change anything you want in your profile at FT, but at this time it appears they have given up trying to access the server - plus we have many safeguards installed. I think most of the H5N1 hits are real people and entities. It remains one of the biggest natural threats to mankind.
As to twitter who was hacked yesterday and 250,000 accounts were accessed, we were not one of those. I changed our password anyway. So we are not the focus of that set of hackers. There is speculation it was China.
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
February 19th, 2013, 09:12 AM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: FluTrackers 2012 Total Year Statistics - Preliminary
Chinese Army Unit Is Seen as Tied to Hacking Against U.S.
By DAVID E. SANGER, DAVID BARBOZA and NICOLE PERLROTH
Published: February 18, 2013 177 Comments
On the outskirts of Shanghai, in a run-down neighborhood dominated by a 12-story white office tower, sits a People’s Liberation Army base for China’s growing corps of cyberwarriors.
more...
http://www.nytimes.com/2013/02/19/te....html?hp&_r=1&
--------------------------
Most of the ips engaging in a continuous DOS attack against us have originated in Putian, Fujian province. I have managed to cut the traffic to the server down to 1,060,311 page views so far in February - down from 9,714,466 in December.
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
March 19th, 2013, 03:11 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
We are experiencing a continuing DOS attack and are slow this afternoon. I am working with the server company after receiving this email from them:
Date: Mar 19, 2013 3:40 PM
IMPORTANT: Do not ignore this email.
.... the cpu has been maxed out for more than a 6 hour period......You should check the server to see why the load is so high and take steps to lower the load......
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
March 19th, 2013, 03:21 PM
|
 |
Senior Moderator
|
|
Join Date: May 2009
Posts: 3,572
|
|
Re: Continuing Attempts to Thwart FluTrackers
It does seem to running slow today.
__________________
"L’amore ai tempi del caos"
"It is not helpful to hinge the future of the nuclear industry and an important element of the energy supply to a claim that low levels of radiation cause 'negligible' damage or are even helpful." ----Richard Garwin - IBM Emeritus Fellow; Adjunct Prof. of Physics, Columbia University
(My posts are not intended as advice or professional assessments of any kind.)
|
March 20th, 2013, 07:43 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
We tightened the firewall settings and this inadvertently caused the server to automatically ban some frequent users, including me and Sally! lol
We are working with the server company to determine the correct settings.
If you can not see FluTrackers from your regular location, please email us at flutrackers@earthlink.net
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
March 21st, 2013, 09:51 AM
|
|
Senior Moderator
|
|
Join Date: Apr 2009
Posts: 7,749
|
|
Re: Continuing Attempts to Thwart FluTrackers
I am having difficulty logging in as well, as it took me two days to sneak in here to post that article solving the outbreak in Carmen de Areco.
At least I know that issue wasn't related to my computer (although I did find several viruses and trojans on my computer this morning)...
|
March 21st, 2013, 09:57 AM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
Quote:
Originally Posted by alert
I am having difficulty logging in as well, as it took me two days to sneak in here to post that article solving the outbreak in Carmen de Areco.
At least I know that issue wasn't related to my computer...
|
I think the firewall banned everyone!
I have been working with the server company last night and this morning to improve the firewall settings.
Because of the spammers, the admins have spent a lot of time dealing with this issue - and that was probably their intent.
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
March 28th, 2013, 04:54 AM
|
 |
Editor, Senior Moderator
|
|
Join Date: Aug 2009
Location: USA
Posts: 16,876
|
|
Re: Continuing Attempts to Thwart FluTrackers
http://gadgets.ndtv.com/internet/new...the-web-347585
Internet trouble? You're not alone - why it was one bad day for the Web
Anupam Saxena, March 28, 2013
Looks like we've just experienced one of the worst days in history of the Internet. Millions of users were affected by a snarl that led to delays in loading websites or accessing other online services.
One of the major reasons for the slowdown was a tiff between Spamhaus ,a group fighting spam and Cyberbunker, a Dutch company that hosts Web sites said to be sending spam that led to one of the largest computer attacks on the Internet, causing widespread congestion and jamming crucial infrastructure around the world.
The dispute started when Spamhaus added Cyberbunker to its blacklist, which is used by email providers to weed out spam.
Cyberbunker allegedly started "bazooka" attacks which were essentially distributed denial of service attack (DDoS), that essentially bombard sites with traffic in an effort to disrupt them.
...
The other reason was cutting of the South East Asia-Middle East-Western Europe 4 (aka SEA-ME-WE 4) undersea cable near Alexandria in Egypt, that affected users in and around Africa, Middle East and some parts of Asia. Online publication Gigaom also points out that the timing of the cut was unfortunate as other major cables including Europe India Gateway (EIG) and India-Middle East-Western Europe (IMEWE) were in "maintenance mode."
...
__________________
Twitter: @RonanKelly13
The views expressed are mine alone and do not represent the views of my employer or any other person or organization.
|
March 31st, 2013, 01:38 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
Gert began posting our China H7N9 thread at 1:50 am EST. We went down at some point after that. Our server is monitored 24/7 by the server company and we received this email from them when they restarted our server.
From: support@lunarpages.com
To: flutrackers@earthlink.net
Subject: Dedicated Server Rebooted - flutrackers.com
Date: Mar 31, 2013 2:50 AM
Note: Replying more than once may delay our response time, because your ticket will be placed at the bottom of our ticket queue.
Dear FluTrackers,
Request supervisor
A technician responded to your ticket with:
Hello,
Once more we found your dedicated server alerting for multiple services and unresponsive. We had no other choice but to reboot server. Your server is back up and running fine now. Checking your server we found that it was heavily load due to which went unresponsive......
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
April 6th, 2013, 06:48 AM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
And again
Please note that the server company is in the Pacific time zone hence the difference in the time stamps:
From: support
To: flutrackers@earthlink.net
Subject: Re: [Lunarpages Online HelpDesk] [TQ02NF47FJL7] Dedicated Server Rebooted - flutrackers.com
Date: Apr 6, 2013 2:59 AM
Note: Replying more than once may delay our response time, because your ticket will be placed at the bottom of our ticket queue.
Dear FluTrackers,
Request supervisor
A technician responded to your ticket with:
Hello,
Once more we found your dedicated server alerting for multiple services and unresponsive. We had no other choice but to reboot server. Your server is back up and running fine now. Checking your server we found that it was heavily load due to which went unresponsive. Details are given below.
Reboot logs are copied below. ==================
Apr 5 22:34:41 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:02:d8:40:00:08:00 SRC=202.58.9.56 DST=67.210.96.104 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=1546 PROTO=UDP SPT=10813 DPT=33441 LEN=12
Apr 5 22:34:42 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:02:d8:40:00:08:00 SRC=202.58.9.56 DST=67.210.96.104 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=1546 PROTO=UDP SPT=10813 DPT=33441 LEN=12
Apr 5 22:34:43 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=202.58.9.92 DST=67.210.96.104 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=267 PROTO=UDP SPT=10813 DPT=33436 LEN=12
Apr 5 22:34:44 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=202.58.9.88 DST=67.210.96.104 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=1292 PROTO=UDP SPT=10813 DPT=33440 LEN=12
Apr 5 22:34:44 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:02:d8:40:00:08:00 SRC=202.58.9.56 DST=67.210.96.104 LEN=32 TOS=0x00 PREC=0x00 TTL=2 ID=1547 PROTO=UDP SPT=10813 DPT=33441 LEN=12
Apr 5 22:34:45 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=202.58.9.92 DST=67.210.96.104 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=267 PROTO=UDP SPT=10813 DPT=33436 LEN=12
Apr 5 22:34:46 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:02:d8:40:00:08:00 SRC=202.58.9.56 DST=67.210.96.104 LEN=32 TOS=0x00 PREC=0x00 TTL=2 ID=1547 PROTO=UDP SPT=10813 DPT=33441 LEN=12
Apr 5 22:34:48 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=202.58.9.88 DST=67.210.96.104 LEN=32 TOS=0x00 PREC=0x00 TTL=2 ID=1293 PROTO=UDP SPT=10813 DPT=33440 LEN=12
Apr 5 22:34:50 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:02:d8:40:00:08:00 SRC=202.58.9.56 DST=67.210.96.104 LEN=32 TOS=0x00 PREC=0x00 TTL=3 ID=1548 PROTO=UDP SPT=10813 DPT=33441 LEN=12
Apr 5 22:34:52 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:02:d8:40:00:08:00 SRC=202.58.9.56 DST=67.210.96.104 LEN=32 TOS=0x00 PREC=0x00 TTL=4 ID=1549 PROTO=UDP SPT=10813 DPT=33441 LEN=12
Apr 5 22:34:54 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:02:d8:40:00:08:00 SRC=202.58.9.56 DST=67.210.96.104 LEN=32 TOS=0x00 PREC=0x00 TTL=4 ID=1549 PROTO=UDP SPT=10813 DPT=33441 LEN=12
Apr 5 22:34:56 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:02:d8:40:00:08:00 SRC=202.58.9.56 DST=67.210.96.104 LEN=32 TOS=0x00 PREC=0x00 TTL=5 ID=1550 PROTO=UDP SPT=10813 DPT=33441 LEN=12
Apr 5 22:34:58 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:02:d8:40:00:08:00 SRC=202.58.9.56 DST=67.210.96.104 LEN=32 TOS=0x00 PREC=0x00 TTL=5 ID=1550 PROTO=UDP SPT=10813 DPT=33441 LEN=12
Apr 5 22:35:00 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=202.58.9.88 DST=67.210.96.104 LEN=32 TOS=0x00 PREC=0x00 TTL=5 ID=1296 PROTO=UDP SPT=10813 DPT=33440 LEN=12
Apr 5 22:35:02 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=202.58.9.88 DST=67.210.96.104 LEN=32 TOS=0x00 PREC=0x00 TTL=5 ID=1296 PROTO=UDP SPT=10813 DPT=33440 LEN=12
Apr 5 22:54:55 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=59.72.0.77 DST=67.210.96.105 LEN=40 TOS=0x04 PREC=0x00 TTL=100 ID=56349 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0
Apr 5 22:54:55 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=59.72.0.77 DST=67.210.96.104 LEN=40 TOS=0x04 PREC=0x00 TTL=100 ID=56348 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0
Apr 5 22:57:27 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=222.186.59.216 DST=67.210.96.105 LEN=40 TOS=0x04 PREC=0x00 TTL=102 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0
Apr 5 22:57:27 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=222.186.59.216 DST=67.210.96.104 LEN=40 TOS=0x04 PREC=0x00 TTL=100 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0
Apr 5 23:03:02 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=217.118.24.175 DST=67.210.96.105 LEN=48 TOS=0x04 PREC=0x00 TTL=113 ID=249 PROTO=TCP SPT=3781 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0
Apr 5 23:03:02 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=217.118.24.175 DST=67.210.96.104 LEN=48 TOS=0x04 PREC=0x00 TTL=113 ID=57167 PROTO=TCP SPT=3781 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0
Apr 5 23:08:50 server sshd: refused connect from ::ffff:82.221.99.234 (::ffff:82.221.99.234) Apr 5 23:10:27 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=202.103.178.23 DST=67.210.96.104 LEN=40 TOS=0x04 PREC=0x00 TTL=105 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0
Apr 5 23:10:27 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=202.103.178.23 DST=67.210.96.105 LEN=40 TOS=0x04 PREC=0x00 TTL=104 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0
Apr 5 23:11:16 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=118.244.172.117 DST=67.210.96.104 LEN=40 TOS=0x04 PREC=0x00 TTL=103 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0
Apr 5 23:11:16 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=118.244.172.117 DST=67.210.96.105 LEN=40 TOS=0x04 PREC=0x00 TTL=100 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0
Apr 5 23:11:58 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=61.147.111.58 DST=67.210.96.104 LEN=40 TOS=0x04 PREC=0x00 TTL=104 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0
Apr 5 23:11:58 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=61.147.111.58 DST=67.210.96.105 LEN=40 TOS=0x04 PREC=0x00 TTL=104 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0
Apr 5 23:13:58 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=198.100.111.195 DST=67.210.96.104 LEN=40 TOS=0x04 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0
Apr 5 23:13:58 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:30:48:8e:90:0a:00:d0:2b:1b:b5:00:08:00 SRC=198.100.111.195 DST=67.210.96.105 LEN=40 TOS=0x04 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0
Apr 5 23:16:43 server sshd: refused connect from ::ffff:37.57.124.247 (::ffff:37.57.124.247)
Apr 5 23:16:43 server sshd: refused connect from ::ffff:37.57.124.247 (::ffff:37.57.124.247)
Apr 5 23:22:34 server nrpe[27069]: Error: Could not complete SSL handshake. 5
Apr 5 23:22:34 server nrpe[27067]: Error: Could not complete SSL handshake. 5
Apr 5 23:22:34 server nrpe[27065]: Error: Could not complete SSL handshake. 5
Apr 5 23:22:34 server nrpe[27063]: Error: Could not complete SSL handshake. 5
Apr 5 23:22:34 server nrpe[27061]: Error: Could not complete SSL handshake. 5
Apr 5 23:22:34 server nrpe[27058]: Error: Could not complete SSL handshake. 5
Apr 5 23:23:17 server nrpe[27090]: Error: Could not complete SSL handshake. 5
Apr 5 23:37:29 server syslogd 1.4.1: restart.
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
April 9th, 2013, 01:23 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
And it goes on.....
From: server
To: flutrackers
Subject: Server Overload on flutrackers.com
Date: Apr 9, 2013 2:00 PM
IMPORTANT: Do not ignore this email.
While processing the log files for user the cpu has been
maxed out for more than a 6 hour period. ..... ...take
steps to lower the load.
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
April 14th, 2013, 05:02 AM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
and.....
From: support
To: flutrackers@earthlink.net
Subject: High Load
Date: Apr 14, 2013 1:26 AM
Note: Replying more than once may delay our response time, because your ticket will be placed at the bottom of our ticket queue.
Dear FluTrackers,
Request supervisor
A technician responded to your ticket with:
Hello, Today your server is alerting again for very high load:........
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
April 18th, 2013, 03:49 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
We went down this morning for some period of time. The server company told me that ONE ip, alone, had 100 connections to the site. It was another DOS attack.
And this afternoon:
From: support
To: flutrackers
Subject: Re: High load on dedicated server
Date: Apr 18, 2013 3:35 PM
Note: Replying more than once may delay our response time, because your ticket will be placed at the bottom of our ticket queue.
Dear FluTrackers,
Request supervisor
A technician responded to your ticket with:
Hello,
Recently your server become unresponsive due to huge load. I've rebooted it but the server remain inaccessible. I've contacted my colleague from our datacenter and soon we'll update you regarding your server status. Meanwhile, if you need information or have some questions, please don't hesitate to contact us. Our team will be glad to assist you in this matter!
Thank you!
Kind Regards,
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
April 18th, 2013, 04:06 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
From: support
To: flutrackers
Subject:High load on dedicated server
Date: Apr 18, 2013 4:03 PM
Note: Replying more than once may delay our response time, because your ticket will be placed at the bottom of our ticket queue.
Dear FluTrackers,
Request supervisor
A technician responded to your ticket with:
Hello,
fsck has checked the file system and now your server is up and fully functional.
Your serer was unresponsive due to huge load (load average: 177.57, 89.14, 36.91 ). I've checked and I noticed that your server have high traffic.
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
May 15th, 2013, 09:04 PM
|
|
Editor-in-Chief & President
|
|
Join Date: Feb 2006
Posts: 23,678
|
|
Re: Continuing Attempts to Thwart FluTrackers
Yesterday we were down for about an hour due to a huge DOS attack.
From: support
To: flutrackers@earthlink.net
Subject: Re: Online HelpDesk
Date: May 14, 2013 4:56 PM
Note: Replying more than once may delay our response time, because your ticket will be placed at the bottom of our ticket queue.
Dear FluTrackers,
Request supervisor
A technician responded to your ticket with:
Hello,
Again your server become unresponsive due to huge load.
CPU % 233.83.......
__________________
"May the long time sun
Shine upon you,
All love surround you,
And the pure light within you
Guide your way on."
"Where your talents and the needs of the world cross, lies your calling."
Aristotle
“In a gentle way, you can shake the world.”
Mohandas Gandhi
Be the light that is within.
|
|
|
|
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
|
|
|
| Thread Tools |
Search this Thread |
|
|
|
| Display Modes |
 Linear Mode
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is On
|
|
|
Disclaimers:
The reader is responsible for discerning the validity, factuality or implications of information posted here, be it fictional or based on real events. Moderators on this forum make every effort to review the material posted on this site however, it is not realistically possible for our staff to manually review each post.
The content of posts on this site, including but not limited to links to other web sites, are the expressed opinion of the original authors or posters and are not endorsed by, or representative of the opinions of, the owners or administration of this website. The posts on this website are the opinion of the specific author or poster and should not be construed as statements of advice or factual information.
Not all posts on this website are intended as truthful or factual assertion by their authors. NO posts on this website should be considered factual information on face value alone. Users are encouraged to USE DISCERNMENT and do their own follow up research while reading and posting on this website. FluTrackers.com Inc. reserves the right to make changes to, corrections and/or remove entirely at any time posts made on this website without notice. In addition, FluTrackers.com Inc. disclaims any and all liability for damages incurred directly or indirectly as a result of a post on this website.
This site is provided "as is" without warranty of any kind, either expressed or implied. You should not assume that this site is error-free or that it will be suitable for the particular purpose which you have in mind when using it. In no event shall FluTrackers.com Inc. be liable for any special, incidental, indirect or consequential damages of any kind, or any damages whatsoever, including, without limitation, those resulting from loss of use, data or profits, whether or not advised of the possibility of damage, and on any theory of liability, arising out of or in connection with the use or performance of this site or other documents which are referenced by or linked to this site.
Finally, FluTrackers.com Inc. reserves the right to delete, correct, or make changes to any post on this website without notice at any time for any reason.
Fair Use Notice:
This site may contain copyrighted material the use of which has not always been specifically authorized by the copyright owner. Users may make such material available in an effort to advance awareness and understanding of issues relating to public health, civil rights, economics, individual rights, international affairs, liberty, science & technology, etc. We believe this constitutes a 'fair use' of any such copyrighted material as provided for in section 107 of the US Copyright Law. In accordance with Title 17 U.S.C.Section 107, the material on this site is distributed to those who have expressed a prior interest in receiving the included information for research and educational purposes.
In accordance with industry accepted best practices we ask that users limit their copy / paste of copyrighted material to the relevant portions of the article you wish to discuss and no more than 1 paragraph, and in no case more than 50% of the source material provide a link back to the original article and provide your original comments / criticism in your post with the article. Please remember you are responsible for what you post on the internet and you could be sued by the original copyright holder if you do not honor these rules.
If you are a legal copyright holder or a designated agent for such and you believe a post on this website falls outside the boundaries of "Fair Use" and legitimately infringes on yours or your clients copyright
we may be contacted concerning copyright matters at:
FluTrackers.com Inc.
c/o Sharon Sanders
1676 Hibiscus Avenue
Winter Park, Florida 32789
Phone: 407-745-1513
E-Mail: flutrackers@earthlink.net
In accordance with section 512 of the U.S. Copyright Act our contact information has been registered with the United States Copyright Office. "Safe Harbor" noticing procedures as outlined in the DMCA apply to this website concerning all 3rd party posts published herein.
If notice is given of an alleged copyright violation we will act expeditiously to remove or disable access to the material(s) in question.
All 3rd party material posted on this website is the copyright of the respective owners / authors. FluTrackers.com Inc. makes no claim of copyright on such material.
For more information please visit:
http://www.law.cornell.edu/uscode/17/107.shtml
Please be aware any communications sent complaining about a post on this website may be posted publicly at the discretion of the administration.
FluTrackers Does Not Provide Any Medical Advice:
FluTrackers, Inc. does not provide medical advice. Information on this web site is collected from various internet resources, and the FluTrackers board of directors makes no warranty to the safety, efficacy, correctness or completeness of the information posted on this site by any author or poster.
The information collated here is for instructional and/or discussion purposes only and is NOT intended to diagnose or treat any disease, illness, or other medical condition. Every individual reader or poster should seek advice from their personal physician/healthcare practitioner before considering or using any interventions that are discussed on this website.
By continuing to access this website you agree to consult your personal physican before using any interventions posted on this website, and you agree to hold harmless FluTrackers.com Inc., the board of directors, the members, and all authors and posters for any effects from use of any medication, supplement, vitamin or other substance, device, intervention, etc. mentioned in posts on this website, or other internet venues referenced in posts on this website.
By using and/or accessing this site, either passively or actively, you are agreeing to all of the above conditions. Also, by using and/or accessing this site, either passively or actively, you agree to conduct all business and legal affairs related to this website in the jurisdiction of Flutrackers.com Inc. which is registered in Central Florida, USA.
These Disclaimers are subject to change at anytime.
Email the Webmaster with questions or comments about this site at flutrackers@earthlink.net
All times are GMT -5. The time now is 10:21 PM.
|
