Travis

Failed logins from these:
admin/password from 66.14.202.166: 26 Time(s)
guest/password from 66.14.202.166: 13 Time(s)
root/password from 66.14.202.166: 39 Time(s)
test/password from 66.14.202.166: 26 Time(s)
user/password from 66.14.202.166: 13 Time(s)

And this is all today

__________________
"A lot of people are waiting for Martin Luther King or Mahatma Gandhi to come back -- but they are gone. We are it. It is up to us. It is up to you."
— Marian Wright Edelman

bassdaddy777

I was just about to post that I couldn't pull up www.surpasshosting.com - it won't even ping! My sites are up, but the server status page is not.

Ddos attack? Aliens? Mice in the servers? Bald headed minds want to know.

__________________
Bronze Reseller
Pass36

Emmanuel

nothing to be worrried about to much

everyday people try to access random servers and ips

I can get that IP blocked for you just shoot me an email esurpasshosting.com

__________________
Emmanuel :: Surpass Hosting Network Admin
http://www.SurpassHosting.com

Travis

Got this yesterday

Failed logins from these:
admin/password from 134.208.10.158: 4 Time(s)
admin/password from 64.246.32.92: 43 Time(s)
guest/password from 134.208.10.158: 2 Time(s)
guest/password from 195.226.73.98: 16 Time(s)
guest/password from 200.161.141.244: 25 Time(s)
guest/password from 64.246.32.92: 22 Time(s)
root/password from 134.208.10.158: 4 Time(s)
root/password from 64.246.32.92: 63 Time(s)
test/password from 134.208.10.158: 3 Time(s)
test/password from 195.226.73.98: 18 Time(s)
test/password from 200.161.141.244: 25 Time(s)
test/password from 64.246.32.92: 43 Time(s)
user/password from 134.208.10.158: 2 Time(s)
user/password from 64.246.32.92: 21 Time(s)

Ikes!

__________________
"A lot of people are waiting for Martin Luther King or Mahatma Gandhi to come back -- but they are gone. We are it. It is up to us. It is up to you."
— Marian Wright Edelman

sam

admin/password from 64.246.32.92: 43 Time(s)
user/password from 64.246.32.92: 21 Time(s)


someone needs to get hit with the IP ban stat.

Travis

iptables -A INPUT -s 64.246.32.92 -j DROP

This is what i did hope its right!

Why do they try to get "Admin" isnt that a windows server user? would the nmap the server to see if its a windows or linux server?

__________________
"A lot of people are waiting for Martin Luther King or Mahatma Gandhi to come back -- but they are gone. We are it. It is up to us. It is up to you."
— Marian Wright Edelman

pikaflash

eman, i sent a ticket about that last night, i have been receiving the cron reports exactly like unleashed for many days, but yesterday night, my board had over 150 connections from one single IP in like 10 minutes, and it was connected many different boards (i mean.. even with a T1, someone wouldn't be clicking that fast one by one on ALL my boards, i added the IP to the deny list and a few minutes later a different IP was making the same (also was added to the deny list), i got worried and sent the ticket (which was forwarded to abuse.. that's what i was told). And a while ago i was checking out the stats, and look:

the first IP i saw with too many connections

64.233.173.213 Pages 60457 Hits 60457 Bandwidth 2.08 GB last visit 10 Aug 2004 - 11:36

the second
207.46.98.132 Pages 2940 Hits 2940 Bandwidth 155.17 MB last visit 10 Aug 2004 - 03:04

i didn't see this yesterday, but as is almost the same number than above, i've just added it to the deny list
207.46.98.131 Pages 2777 Hits 2777 Bandwidth 134.96 MB last visit 10 Aug 2004 - 11:37


then i'm worried now, is there something that can be done?? i haven't received any other answer besides the ticket being sent to abuse.

thanks

__________________
...the evolution continues! Anime Pokemon Pikachu Foros Postales DibuJarte Animekai Oekaki

Anime Animated gifs, Kaoani Smilies and Japanese emoticons

Travis

i would ban 207.46.98.131-200

__________________
"A lot of people are waiting for Martin Luther King or Mahatma Gandhi to come back -- but they are gone. We are it. It is up to us. It is up to you."
— Marian Wright Edelman

Travis

Wow tonight-

Failed logins from these:
admin/password from 12.181.1.232: 10 Time(s)
admin/password from 210.92.110.56: 2 Time(s)
admin/password from 211.75.221.105: 20 Time(s)
admin/password from 66.79.161.66: 110 Time(s)
guest/password from 12.181.1.232: 5 Time(s)
guest/password from 210.92.110.56: 1 Time(s)
guest/password from 211.75.221.105: 10 Time(s)
guest/password from 66.79.161.66: 60 Time(s)
root/password from 12.181.1.232: 15 Time(s)
root/password from 210.92.110.56: 3 Time(s)
root/password from 211.75.221.105: 30 Time(s)
root/password from 66.79.161.66: 156 Time(s)
test/password from 12.181.1.232: 10 Time(s)
test/password from 210.92.110.56: 2 Time(s)
test/password from 211.75.221.105: 20 Time(s)
test/password from 66.79.161.66: 116 Time(s)
user/password from 12.181.1.232: 5 Time(s)
user/password from 210.92.110.56: 1 Time(s)
user/password from 211.75.221.105: 10 Time(s)
user/password from 66.79.161.66: 54 Time(s)

__________________
"A lot of people are waiting for Martin Luther King or Mahatma Gandhi to come back -- but they are gone. We are it. It is up to us. It is up to you."
— Marian Wright Edelman