Jkay Posted August 29, 2010 Report Share Posted August 29, 2010 Thank goodness for the Internet bubble crash several years ago. Anyone with $100 can hit eBay and buy an enterprise class server from a failed internet start-up in liquidation. I picked up a Dell dual Xeon server with 5-tray integral SCSI raid array for pocket change and use it for a firewall and file server in the basement of my house. I just looked at my server logs and noted that someone has been hitting my IP HARD AS HELL for the past 2 days, with close to 2000 IPs banned by the firewall for attempted intrusion. Now I'm not paranoid enough to think it's only me ... so there must be a botnet on the loose right now? Who can confirm this Quote Link to comment Share on other sites More sharing options...
cornerstone Posted August 29, 2010 Report Share Posted August 29, 2010 Maybe they're the spirit of Repgeek's 'ghost' members come to say hello? Or did you accidentally put the next-big-thing-sex-tape up on your server by mistake? Quote Link to comment Share on other sites More sharing options...
Jkay Posted August 29, 2010 Author Report Share Posted August 29, 2010 Ohh right. come to think of it, I did just put up lindsay.lohan.does.rayjay.wmv on the ftp site! Thanks for clearing this up for me. I'll check the logs again after lunch and see if all the bad bots have gone home finally. Quote Link to comment Share on other sites More sharing options...
cornerstone Posted August 29, 2010 Report Share Posted August 29, 2010 Quote Link to comment Share on other sites More sharing options...
Nanuq Posted August 29, 2010 Report Share Posted August 29, 2010 Turn off FTP at the router and 99% of the problems go away. I use another access method and it's peachy keen. PM for details. I bet almost all those IPs can traceback to China. Quote Link to comment Share on other sites More sharing options...
Member X Posted August 29, 2010 Report Share Posted August 29, 2010 I have no idea what any of you have just said Quote Link to comment Share on other sites More sharing options...
Jkay Posted August 29, 2010 Author Report Share Posted August 29, 2010 Oh I was just playing up the joke cornerstone made about porn vids on my server. I don't actually have any open ports on my firewall for serving files to the Internet. All 2000 hosts were auto-banned for msql exploit attempts to gain heightened privs. Quote Link to comment Share on other sites More sharing options...
Nanuq Posted August 29, 2010 Report Share Posted August 29, 2010 Pffffft. You're on the Web with passive management? The problems will only increase. The key is ACTIVE resistance. I have a custom interface linking my 220v power panel through 12 gauge wiring to the ISP. When my router detects an intruder it simply closes the switch and connects the 220v supply to the LAN card of the intruder for 0.5 seconds. Poof, problem solved. Quote Link to comment Share on other sites More sharing options...
Jkay Posted August 29, 2010 Author Report Share Posted August 29, 2010 That's long been a dream of mine, Nanuq The bot storm is still raging here, as of 20:00 GMT .. at least the days are long gone when a small time bot owner could bring down your net connection with an attack like this. 2000 bots would have made my old 28.8k modem assplode. Quote Link to comment Share on other sites More sharing options...
Jkay Posted August 31, 2010 Author Report Share Posted August 31, 2010 Looks like the clouds have parted and the botstorm is over. Sounds good to me. No one heard of this being a net-wide outbreak? I don't think anyone would waste their time hitting me personally. That's just crazy talk. Quote Link to comment Share on other sites More sharing options...
P4GTR Posted August 31, 2010 Report Share Posted August 31, 2010 I have a custom interface linking my 220v power panel through 12 gauge wiring to the ISP. When my router detects an intruder it simply closes the switch and connects the 220v supply to the LAN card of the intruder for 0.5 seconds. Poof, problem solved. If that were possible, George Lucas would have to name his next flick Net Wars Quote Link to comment Share on other sites More sharing options...
Nanuq Posted August 31, 2010 Report Share Posted August 31, 2010 Jkay, no evidence of a botstorm in the Arctic. Perhaps it's my signs posted on the ISP connection? Anonymous visitors will see "Spes omnes relinquite, o vos intrantes" Bwahahahahahaaaaaaaa Quote Link to comment Share on other sites More sharing options...
cornerstone Posted August 31, 2010 Report Share Posted August 31, 2010 Turn off FTP at the router and 99% of the problems go away. http://www.youtube.com/watch?v=QpmLrz_lSuE http://www.youtube.com/watch?v=gt9j80Jkc_A Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.