| Redeemer Insanity http://vm.n6nu.org/bbs/ |
|
| NWRO and CG offline? http://vm.n6nu.org/bbs/viewtopic.php?f=3&t=1123 |
Page 1 of 2 |
| Author: | |3iGi [ Mon Nov 17, 2003 9:04 pm ] |
| Post subject: | NWRO and CG offline? |
I am showing both servers down right now. I searched the DM list and no luck finding them there either. Anyone know whats going on? R they being DoS'd? |
|
| Author: | |3iGi [ Mon Nov 17, 2003 9:21 pm ] |
| Post subject: | |
still down |
|
| Author: | |3iGi [ Mon Nov 17, 2003 9:25 pm ] |
| Post subject: | |
Anyway....I am looking for some fraggin....mine is up so lets do it. I have to goto bed in an hour....lol. Need my medicine.....fraggin is addictive. 68.66.119.210:7777 btw, Cg has been down all evening herm (last 3 hours). I assumed you took it offline....but then NWRO went down also.... |
|
| Author: | |3iGi [ Mon Nov 17, 2003 10:02 pm ] |
| Post subject: | |
Cg back up.... |
|
| Author: | Mahatma [ Mon Nov 17, 2003 10:35 pm ] |
| Post subject: | |
I don't know why CG was down, but NWRO was in fact being DOS attacked. How did you know? When you get the shakes, you need that fix asap. :lol: Boom! |
|
| Author: | Hermskii [ Mon Nov 17, 2003 11:28 pm ] |
| Post subject: | True |
Bigtime Downage! Yeah, watch the news. Houston got flooded again. Water was up to my windshield in my car. I never stalled but it did get in and shorted my headlights so they are on even with the car off and my rear floor foot pans are soaked in my little Camry. I was gone most of the day and stuck in water and traffic the whole time. The logs showed a power out at 1:30 my time. So did my clock radios. Several tornados leveled some stuff here too. I am getting hammered by an IP address too. I have it blocked, ignored and everything else and it just keeps on coming. It's from colorado.cablecat.com . The IP is 212.78.156.243 The second I turn on the server, it's showing 3 players and then just multiplies slowly. I'm getting hundreds if not thousands of hits an hour right now. Some people just suck... I can't trace it right now so if someone would, I'd be thanking them. |
|
| Author: | Mahatma [ Tue Nov 18, 2003 1:19 am ] |
| Post subject: | |
You should compare notes with Bo. He tracked a couple IPs also. One seems to be from Spain. Definitely not random -- with both redeemer arenas being targeted. Perhaps a disgruntled regular? Man, you get more rain in Texas than they do in Seattle! I will send my canoe down to you asap. :lol: |
|
| Author: | |3iGi [ Tue Nov 18, 2003 6:43 am ] |
| Post subject: | |
Man, That sucks herm. I just guessed on the DoS....seemed highly unlikely that both servers would go down at the same time. btw, I did manage to get a fix...my eye starts itching if I don't get one.... |
|
| Author: | Hermskii [ Tue Nov 18, 2003 1:14 pm ] |
| Post subject: | Stas |
I timed one minute of attacks on my firewall and it came up to 90 attacks. That's 129,600 attacks a day! Someone please trace this IP for me and show me what your results. IP Address: 212.78.156.243 Source DNS: colorado.cablecat.com Thanks! |
|
| Author: | Hermskii [ Tue Nov 18, 2003 4:12 pm ] |
| Post subject: | Got it! |
Here is what I found out. I have contacted the user and his provider. I will ask Houston.rr.com to block this IP as well. Here it is: whois -h whois.ripe.net 212.78.156.243 ... % This is the RIPE Whois server. % The objects are in RPSL format. % % Rights restricted by copyright. % See http://www.ripe.net/ripencc/pub-ser.../copyright.html inetnum: 212.78.156.0 - 212.78.156.255 netname: CABLECAT-B3-EMPRESES descr: Cable i Televisio de Catalunya descr: Internet de Banda Ampla country: ES admin-c: TA718-RIPE tech-c: TA718-RIPE status: ASSIGNED PA notify: techauna@auna.es mnt-by: AUNA-MNT changed: techauna@auna.es 20030505 source: RIPE route: 212.78.128.0/19 descr: CABLECAT PA Block 1 origin: AS9106 mnt-by: AUNA-MNT changed: techauna@auna.es 20030505 source: RIPE role: Techauna AUNA address: Avenida Diagonal, 579 address: Barcelona 08014 address: Spain phone: +34 93 502 0000 fax-no: +34 93 502 2809 e-mail: techauna@auna.es admin-c: EES12-RIPE tech-c: AGS30-RIPE tech-c: EES12-RIPE tech-c: ABRP1-RIPE tech-c: ALT7-RIPE nic-hdl: TA718-RIPE notify: techauna@auna.es mnt-by: AUNA-MNT remarks: -------------------------------------------------- remarks: for net abuse questions please contact: remarks: abuse@auna.es remarks: -------------------------------------------------- changed: techauna@auna.es 20030312 source: RIPE Maybe Bo will get his up again soon too. I suspect we are getting nailed by the same guy. This address is in Barcelona, Spain. Why do some people have to do stuff like this and just suck in general? I'll let you know what I find out from my ISP and the attackers too. Peace! |
|
| Author: | |3iGi [ Tue Nov 18, 2003 4:24 pm ] |
| Post subject: | |
I am glad you could get it herm. I was looking through my security logs for my router and I found several of the following: 2003/11/17 15:35:51 ** IP Spoofing ** <IP/ICMP> 192.168.2.30 ->> 224.0.0.2 2003/11/17 15:35:53 ** IP Spoofing ** <IP/IGMP> 192.168.2.30 ->> 224.0.0.22 2003/11/11 08:54:49 ** IP Spoofing ** <IP/UDP> 192.168.2.2:49205 ->> 239.255.255.253:427 I see it with different Ips and ports. Does anyone know what this is? Also, I had a question about pings. If I set my router to not respond to an ICMP Ping, will this affect my server. I am thinking it will. Also, Herm, I was wondering if you could shoot me an email when you have a chance with some tips about server security? |
|
| Author: | Scify [ Tue Nov 18, 2003 8:32 pm ] |
| Post subject: | |
I can't figure it out you guys do that.I hbeen looking on Norton I couldn't figure how you do that.I get alert I how how do that.............................................. By the way If I leave game not say be i may get cut off By cable company do they update cable Nov 20 to Dec 5. :evil: :evil: :evil: :evil: :evil: :evil: :evil: |
|
| Author: | |3iGi [ Tue Nov 18, 2003 8:48 pm ] |
| Post subject: | |
ummm....it sounds like english, but I have no idea what you just said.... |
|
| Author: | Scify [ Tue Nov 18, 2003 8:59 pm ] |
| Post subject: | |
I was try to track Herm Ip Attacker.I couldn't figure How to Do it. That Okay you don't Under stand i have trouble writting thing out I speak Lot better that I can write.That bad I have College degree. :? :? :? :? :? :? :? :? :? :? :? :? :? :? :? :? :? :? :? :? :? :? :? :? :? :? :lol: :lol: :lol: :lol: :lol: :lol: :lol: :lol: :lol: :lol: :lol: :lol: :lol: :lol: :lol: :lol: It be really bad If I had English Degree. Mine Just Art |
|
| Author: | |3iGi [ Tue Nov 18, 2003 9:22 pm ] |
| Post subject: | |
lol....scify....just kidding. I tried everything I knew and couldn't get it. I played with some port scanners and pass crackers some...but...not much use to me. I just messed with them to get a general knowledge. There are programs that can do it. But I don't mess with them much. I would get the one that herm has...or you could probably just do a google search |
|
| Page 1 of 2 | All times are UTC - 7 hours |
| Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group http://www.phpbb.com/ |
|