Results 1 to 17 of 17
  1. #1
    Join Date
    Nov 2013
    Location
    World
    Posts
    5

    Datashack.net....a never end nightmare

    Dear,
    just want to share this with you...

    are days that my server are under attack.

    And guess from where start the attack ?
    Yes DATASHACK SERVER !!!

    After i have sent something like 35 e-mail from 3 different account still havent got no reply...

    anyway...im ready to change dns so ill send back this grace !


    anyway...if someone use theyr system, or got some service from theme, please change now !

  2. #2
    Join Date
    Mar 2003
    Location
    WebHostingTalk
    Posts
    16,960
    Moved > Dedicated Server .
    Specially 4 You
    .
    JoneSolutions.Com ( Jones.Solutions ) is on the net 24/7 providing stable and reliable web hosting solutions and services since 2001

  3. #3
    Join Date
    Feb 2006
    Posts
    4,799
    Did you open a ticket in the support system? They respond to those fast enough, You'd think an attack originating from the local network would be easy enough to trace.
    WHMEasyBackup.com - Take Control Of Your Backups!
    Complete Backup Solution For WHM Reseller Accounts
    Download Trial

  4. #4
    Join Date
    Apr 2002
    Location
    North Kansas City, MO
    Posts
    2,565
    What kind of attack is it?
    Aaron Wendel
    Wholesale Internet, Inc. - http://www.wholesaleinternet.net
    Kansas City Internet eXchange - http://www.kcix.net

  5. #5
    Join Date
    Nov 2013
    Location
    World
    Posts
    5
    on datashack.net i can only use the contact form

    and the attack is dos and syn flood

    anyway i've solved...

    my zywall dropped 180 requet in less 2 min....

    actually im sendin back all this request.....

  6. #6
    Join Date
    Apr 2002
    Location
    North Kansas City, MO
    Posts
    2,565
    How do you know it's from Datashack and not spoofed?
    Aaron Wendel
    Wholesale Internet, Inc. - http://www.wholesaleinternet.net
    Kansas City Internet eXchange - http://www.kcix.net

  7. #7
    Join Date
    Feb 2006
    Posts
    4,799
    Quote Originally Posted by antoniodan View Post
    on datashack.net i can only use the contact form
    You should have a login to the billing/support platform: https://support.datashack.net/

    How do you pay your invoices?
    WHMEasyBackup.com - Take Control Of Your Backups!
    Complete Backup Solution For WHM Reseller Accounts
    Download Trial

  8. #8
    Join Date
    Apr 2002
    Location
    North Kansas City, MO
    Posts
    2,565
    Quote Originally Posted by DWS2006 View Post
    You should have a login to the billing/support platform: https://support.datashack.net/

    How do you pay your invoices?
    I don't think he's a customer. He's just saying he's getting attacked from a server on their network.

    OP: Welcome to WHT by the way. I see this is your first post.
    Aaron Wendel
    Wholesale Internet, Inc. - http://www.wholesaleinternet.net
    Kansas City Internet eXchange - http://www.kcix.net

  9. #9
    Join Date
    Feb 2004
    Location
    Dubai
    Posts
    192
    I think what he means is, the attacker is using a datashack.net server to attack him!

  10. #10
    Join Date
    Feb 2006
    Posts
    4,799
    Quote Originally Posted by WII-Aaron View Post
    I don't think he's a customer. He's just saying he's getting attacked from a server on their network.

    OP: Welcome to WHT by the way. I see this is your first post.
    LOL My Bad. Just assumed from the title that the OP was a client.
    WHMEasyBackup.com - Take Control Of Your Backups!
    Complete Backup Solution For WHM Reseller Accounts
    Download Trial

  11. #11
    Join Date
    Mar 2013
    Posts
    1,294
    Did you disable recursion?
    Your DNS server might have been amplifying an attack...

  12. #12
    Join Date
    Nov 2013
    Location
    World
    Posts
    5
    recursion disabled....

    and im not their client...


    was googlin till now...have read "many beautiful things" about them...

  13. #13
    Join Date
    Nov 2002
    Posts
    4,376
    From one IP? What is the IP?

  14. #14
    Join Date
    Nov 2013
    Location
    World
    Posts
    5
    are 3 or 4...

    wait take log

  15. #15
    Join Date
    Nov 2013
    Location
    World
    Posts
    5
    found this from fail2ban

    tomorrow im in office and take zywall log

    Nov 18 09:19:46 mad-web sshd[1948]: Did not receive identification string from 198.204.255.36
    Nov 18 09:24:03 mad-web sshd[2155]: reverse mapping checking getaddrinfo for welcomess.com [198.204.255.36] failed - POSSIBLE BREAK-IN ATTEMPT!
    Nov 18 09:24:03 mad-web sshd[2155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.204.255.36 user=root
    Nov 18 09:24:05 mad-web sshd[2155]: Failed password for root from 198.204.255.36 port 58417 ssh2

  16. #16

    Doss Attack

    Hello

    Its possible its Doss Attack I've seen that before from that domain.

    Try blocking all Incoming ICMP Packets.

  17. #17
    Join Date
    Apr 2013
    Location
    Boston, MA
    Posts
    390
    You could block their IPs on the firewall.

    List of IP blocks:

    http://bgp.he.net/search?search%5Bse...&commit=Search

Similar Threads

  1. KEEP AWAY from datashack.net!
    By pirate2050 in forum Dedicated Server
    Replies: 13
    Last Post: 11-21-2012, 10:29 AM
  2. Datashack.net ?????
    By joeyc in forum Colocation and Data Centers
    Replies: 2
    Last Post: 04-30-2012, 07:46 PM
  3. my nightmare has no end for 15days and continue
    By kteo in forum Dedicated Server
    Replies: 5
    Last Post: 03-02-2012, 05:06 PM
  4. datashack.net - are they serious?
    By silasistefan in forum Dedicated Server
    Replies: 21
    Last Post: 01-23-2012, 10:30 PM
  5. Anyone use Datashack.net?
    By SimplisticServers in forum Dedicated Server
    Replies: 15
    Last Post: 05-23-2011, 01:06 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •