gator412 inbound attack

[GatorDavid]

Hello,

Due to an inbound attack of levels around 2.1 GB, this server is now experiencing an outage. As of right now, the amount of traffic is too high to manage with the Cisco guard, so unfortunately we will have to wait out the attack.

Once the traffic drops to a manageable level, we will filter out the rest of the malicious requests.

I will continue to monitor this server for the rest of my shift. As soon as we get any updates, I will let you guys know. I apologize for any inconvenience.

[Xtr3meVideos]

This is the second time in a week or so.

[prxbl]

is this attack targeting a certain IP address ? maybe a certain domain name ? because if that's the case, we shouldn't have our websites down because of that client.

[gil05]

Within how much time the server is made/likely to return to work her? And why do not informers on you stopped service before? And if non allowed meanwhile to search additional solutions in order not to cease the action of the server for the customers?

[Xtr3meVideos]

The IP Address under attack is the server IP. 75.x.x.x.

This is not an attack on a particular site, domain, or IP. The same IP is used for all the websites. This attack is solely on the server itself. This problem can not be solved due to an overload which renders the control panel areas for the admins unusable. This means it must be waited out.

On a more positive note, I am able to access my website again. Has the problem been solved?

[GatorDavid]

Hello,

The main server IP was being hit- of course as always if a particular domain was causing the attack, then we would simply nullroute their zone file.

The server is back up and accepting network requests, however it is still behind the Cisco guard. Let me know if you guys see any problems. Thanks.

[Archaic Sage]

There are loads of attacks happening across the internet at the moment, owing to an exploit in a few scripts. Coppermine being one of them:

http://forum.coppermine-gallery.net/...c,51671.0.html

That's may be one of the reasons. They just got my site...

[prxbl]

my websites are up too

[jtaubman]

Archaic Sage, if you have not already done so, rename update.php and admin.php, so they can not be run.

[Archaic Sage]

I have done already, but thanks for the information anyway

[wildweasel]

Is Hostgator going to update Fantastico with the new Coppermine 1.4.17 which has the security fix?

[Sam]

Originally Posted by wildweasel

Is Hostgator going to update Fantastico with the new Coppermine 1.4.17 which has the security fix?

HG aren't in charge of fantastico, you will need to ask netenberg.com

[vegasb2k]

My shared IP is 74.x.x.x and every few minutes I get a "Server Not Found" page as if my web sites are not there. Is this part of the attack mentioned above and when will this clear up (approximately)?

Thanks,

Greg

[dogman]

Same problem. No connection and no CPanel. Please help!