Register | Sign In


Understanding through Discussion


EvC Forum active members: 65 (9162 total)
7 online now:
Newest Member: popoi
Post Volume: Total: 915,816 Year: 3,073/9,624 Month: 918/1,588 Week: 101/223 Day: 12/17 Hour: 0/1


Thread  Details

Email This Thread
Newer Topic | Older Topic
  
Author Topic:   Network Problems
New Cat's Eye
Inactive Member


(2)
Message 16 of 142 (735805)
08-25-2014 2:34 PM
Reply to: Message 15 by ringo
08-25-2014 1:26 PM


I tried Ctrl+Alt+Delete and got a Change User screen
For future reference, Ctrl+Shift+Esc takes you directly to the Task Manager.

This message is a reply to:
 Message 15 by ringo, posted 08-25-2014 1:26 PM ringo has replied

Replies to this message:
 Message 17 by ringo, posted 08-26-2014 11:40 AM New Cat's Eye has seen this message but not replied

  
ringo
Member (Idle past 412 days)
Posts: 20940
From: frozen wasteland
Joined: 03-23-2005


Message 17 of 142 (735836)
08-26-2014 11:40 AM
Reply to: Message 16 by New Cat's Eye
08-25-2014 2:34 PM


Catholic Scientist writes:
For future reference, Ctrl+Shift+Esc takes you directly to the Task Manager.
It took me since Windows 98 to memorize Ctrl+Alt+Delete.

This message is a reply to:
 Message 16 by New Cat's Eye, posted 08-25-2014 2:34 PM New Cat's Eye has seen this message but not replied

  
Admin
Director
Posts: 12998
From: EvC Forum
Joined: 06-14-2002
Member Rating: 2.3


Message 18 of 142 (735883)
08-27-2014 3:14 PM


Okay, I'm back. I'd like to observe the problem myself before attempting to fix it. Is the problem still occurring?

--Percy
EvC Forum Director

Replies to this message:
 Message 19 by Stile, posted 08-27-2014 3:19 PM Admin has seen this message but not replied
 Message 20 by New Cat's Eye, posted 08-27-2014 3:47 PM Admin has seen this message but not replied
 Message 21 by Tangle, posted 08-27-2014 4:06 PM Admin has seen this message but not replied
 Message 22 by Tangle, posted 08-27-2014 5:26 PM Admin has seen this message but not replied
 Message 23 by nwr, posted 08-27-2014 6:57 PM Admin has seen this message but not replied

  
Stile
Member
Posts: 4295
From: Ontario, Canada
Joined: 12-02-2004


Message 19 of 142 (735886)
08-27-2014 3:19 PM
Reply to: Message 18 by Admin
08-27-2014 3:14 PM


Nope.
As they say in my business... good work!

This message is a reply to:
 Message 18 by Admin, posted 08-27-2014 3:14 PM Admin has seen this message but not replied

  
New Cat's Eye
Inactive Member


Message 20 of 142 (735891)
08-27-2014 3:47 PM
Reply to: Message 18 by Admin
08-27-2014 3:14 PM


I had one 503 error earlier this morning.

This message is a reply to:
 Message 18 by Admin, posted 08-27-2014 3:14 PM Admin has seen this message but not replied

  
Tangle
Member
Posts: 9489
From: UK
Joined: 10-07-2011
Member Rating: 4.9


Message 21 of 142 (735892)
08-27-2014 4:06 PM
Reply to: Message 18 by Admin
08-27-2014 3:14 PM


Yes. It improved for a couple of days yesterday and the day before, but today has been back to normal. I'm getting 503s about 20% of the time and slowness all the time. By slowness, I mean it connects then hangs, then if it doesn't 503, it connects quickly.

Life, don't talk to me about life - Marvin the Paranoid Android
"Science adjusts it's views based on what's observed.
Faith is the denial of observation so that Belief can be preserved."
- Tim Minchin, in his beat poem, Storm.

This message is a reply to:
 Message 18 by Admin, posted 08-27-2014 3:14 PM Admin has seen this message but not replied

  
Tangle
Member
Posts: 9489
From: UK
Joined: 10-07-2011
Member Rating: 4.9


Message 22 of 142 (735905)
08-27-2014 5:26 PM
Reply to: Message 18 by Admin
08-27-2014 3:14 PM


22.25 BST
Service Temporarily Unavailable
The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.
Apache Server at EvC Forum: Home Page Port 80
Edited by Tangle, : It's BST not GMT here now!

Life, don't talk to me about life - Marvin the Paranoid Android
"Science adjusts it's views based on what's observed.
Faith is the denial of observation so that Belief can be preserved."
- Tim Minchin, in his beat poem, Storm.

This message is a reply to:
 Message 18 by Admin, posted 08-27-2014 3:14 PM Admin has seen this message but not replied

  
nwr
Member
Posts: 6408
From: Geneva, Illinois
Joined: 08-08-2005
Member Rating: 5.1


Message 23 of 142 (735926)
08-27-2014 6:57 PM
Reply to: Message 18 by Admin
08-27-2014 3:14 PM


It was pretty rough at around 6:54 EDT, but responding properly only two minutes later.

Fundamentalism - the anti-American, anti-Christian branch of American Christianity

This message is a reply to:
 Message 18 by Admin, posted 08-27-2014 3:14 PM Admin has seen this message but not replied

  
Admin
Director
Posts: 12998
From: EvC Forum
Joined: 06-14-2002
Member Rating: 2.3


Message 24 of 142 (735936)
08-28-2014 8:45 AM


Apache Server Restarted
I haven't yet experienced this intermittent problem myself, but I have restarted the Apache server. This is the software process that services requests for webpages from the website.
Please let me know if the problem continues. If it does then I will next reboot the server.

--Percy
EvC Forum Director

Replies to this message:
 Message 25 by Tangle, posted 08-28-2014 12:48 PM Admin has seen this message but not replied

  
Tangle
Member
Posts: 9489
From: UK
Joined: 10-07-2011
Member Rating: 4.9


Message 25 of 142 (735948)
08-28-2014 12:48 PM
Reply to: Message 24 by Admin
08-28-2014 8:45 AM


Re: Apache Server Restarted
'fraid not - 17.47 BST
Service Temporarily Unavailable
The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.
Apache Server at EvC Forum: Home Page Port 80

Life, don't talk to me about life - Marvin the Paranoid Android
"Science adjusts it's views based on what's observed.
Faith is the denial of observation so that Belief can be preserved."
- Tim Minchin, in his beat poem, Storm.

This message is a reply to:
 Message 24 by Admin, posted 08-28-2014 8:45 AM Admin has seen this message but not replied

  
Admin
Director
Posts: 12998
From: EvC Forum
Joined: 06-14-2002
Member Rating: 2.3


Message 26 of 142 (735976)
08-29-2014 9:09 AM


Experiencing some slowness this morning I checked the access log and found that IP address 195.211.155.163 has been banging hard on us, around 400 accesses/second, many to the login page. I added code so that the software now exits without delivering any pages for his IP address. If this isn't enough I'll disable his access at the Apache level. Please keep me apprised of any performance issues.

--Percy
EvC Forum Director

Replies to this message:
 Message 27 by Tangle, posted 08-29-2014 9:40 AM Admin has replied
 Message 28 by PaulK, posted 08-29-2014 9:54 AM Admin has seen this message but not replied

  
Tangle
Member
Posts: 9489
From: UK
Joined: 10-07-2011
Member Rating: 4.9


Message 27 of 142 (735977)
08-29-2014 9:40 AM
Reply to: Message 26 by Admin
08-29-2014 9:09 AM


No problem so far today.
As that's a DoS attack, can't your hosting company block it at their firewall for you?

Life, don't talk to me about life - Marvin the Paranoid Android
"Science adjusts it's views based on what's observed.
Faith is the denial of observation so that Belief can be preserved."
- Tim Minchin, in his beat poem, Storm.

This message is a reply to:
 Message 26 by Admin, posted 08-29-2014 9:09 AM Admin has replied

Replies to this message:
 Message 29 by Admin, posted 08-29-2014 10:28 AM Tangle has replied

  
PaulK
Member
Posts: 17822
Joined: 01-10-2003
Member Rating: 2.2


Message 28 of 142 (735978)
08-29-2014 9:54 AM
Reply to: Message 26 by Admin
08-29-2014 9:09 AM


That address is registered to Unit-IS Ltd, based in Odessa. They run a data centre so probably one of their machines has been compromised.

This message is a reply to:
 Message 26 by Admin, posted 08-29-2014 9:09 AM Admin has seen this message but not replied

  
Admin
Director
Posts: 12998
From: EvC Forum
Joined: 06-14-2002
Member Rating: 2.3


Message 29 of 142 (735981)
08-29-2014 10:28 AM
Reply to: Message 27 by Tangle
08-29-2014 9:40 AM


Tangle writes:
As that's a DoS attack, can't your hosting company block it at their firewall for you?
Surprisingly, no. When the website went offline some months back it was because of a DoS attack that overwhelmed the webhosting company's servers, so they shut our website down. Here's their initial response:
Superb Hosting writes:
I have enabled the IP for the time being. If ddos attack occurs, we will have to null route the IP again.
Since, this is a self managed server, unfortunately you will be responsible for managing security in your server.
Please see our AUP for below regarding dos:
12.2.4. Denial of Service
Under no circumstances may SI's systems be used to gain access or deny access to a system or attempt to gain or attempt to deny access to a system without the permission of the system's owners (or rightful users).
A Denial of Service (DoS) attack is designed to disproportionately consume the resources of a system in order to reduce its ability to serve its function. Under no circumstances may SI's network be used in DoS attacks.
Abnormal traffic shapes may cause detrimental effects to other users and/or the network, and, in extreme cases, may have DoS attack-like effects.
12.2.5. You are solely responsible for maintaining the security of access codes, authorization codes, and passwords.
With that being said, if you want security audits done on your server we can do for 8 support credit or OS hardening services are also offered by our PSD department.
It can also be that server is hacked or it is running an an outdated and un-patched OS.
Having chapter and verse cited to me wasn't that helpful, so I asked for more details:
Superb Hosting writes:
The DDOS received affected other servers. When our routers are inundated with this much data, normal traffic destined for other servers may be dropped, which is unacceptable. The DDOS can be received or transmitted and in this case it was received by your server. There is very little that can be done to mitigate attacks like this without using a third party DDOS mitigation service.
When I inquired further they responded:
Superb Hosting writes:
Yes, your server was the target of a DDOS. I am uncertain as to why it was suggested to have a security audit. You are correct in saying that there is very little that can be done for a DDOS. It is uncommon for us to have a DDOS, maybe 3 times a year some server or another falls victim within our company. Generally, the DDOS is a result of someone getting angry enough about some content on a site and they want it shut down for a laugh.
I don't know why they refer to a DoS as a DDOS. I couldn't figure out what the extra D is for. My reaction to all this was that it seemed strange that they're as helpless in the face as a DoS attack as I am.

--Percy
EvC Forum Director

This message is a reply to:
 Message 27 by Tangle, posted 08-29-2014 9:40 AM Tangle has replied

Replies to this message:
 Message 30 by PaulK, posted 08-29-2014 10:35 AM Admin has seen this message but not replied
 Message 31 by Tangle, posted 08-29-2014 10:43 AM Admin has seen this message but not replied

  
PaulK
Member
Posts: 17822
Joined: 01-10-2003
Member Rating: 2.2


Message 30 of 142 (735983)
08-29-2014 10:35 AM
Reply to: Message 29 by Admin
08-29-2014 10:28 AM


The first responses seem to be assuming that your server had been compromised and was being used for a DoS attack.
DDoS is Distributed DoS - rather than one host attacking dozens are used. The usual source is a "botnet" - malware infiltrated onto a large number of unsuspecting people's computers, enabling remote control for various malign purposes.

This message is a reply to:
 Message 29 by Admin, posted 08-29-2014 10:28 AM Admin has seen this message but not replied

  
Newer Topic | Older Topic
Jump to:


Copyright 2001-2023 by EvC Forum, All Rights Reserved

™ Version 4.2
Innovative software from Qwixotic © 2024