Results 1 to 17 of 17
-
11-19-2013, 05:20 PM #1Newbie
- Join Date
- Nov 2013
- Location
- World
- Posts
- 5
Datashack.net....a never end nightmare
Dear,
just want to share this with you...
are days that my server are under attack.
And guess from where start the attack ?
Yes DATASHACK SERVER !!!
After i have sent something like 35 e-mail from 3 different account still havent got no reply...
anyway...im ready to change dns so ill send back this grace !
anyway...if someone use theyr system, or got some service from theme, please change now !
-
11-19-2013, 05:22 PM #2The Linux Specialist
- Join Date
- Mar 2003
- Location
- /root
- Posts
- 23,990
Moved > Dedicated Server .
Specially 4 U
Reseller Hosting: Boost Your Websites | Fully Managed KVM VPS: 3.20 - 5.00 Ghz, Pure Dedicated Power
JoneSolutions.Com is on the net 24/7 providing stable and reliable web hosting solutions, server management and services since 2001
Debian|Ubuntu|cPanel|DirectAdmin|Enhance|Webuzo|Acronis|Estela|BitNinja|Nginx
-
11-19-2013, 05:28 PM #3Web Hosting Master
- Join Date
- Feb 2006
- Posts
- 5,393
Did you open a ticket in the support system? They respond to those fast enough, You'd think an attack originating from the local network would be easy enough to trace.
WHMEasyBackup.com - Take Control Of Your Backups!
Complete Backup Solution For WHM Reseller Accounts
-
11-19-2013, 05:32 PM #4
What kind of attack is it?
Aaron Wendel
Wholesale Internet, Inc. - http://www.wholesaleinternet.net
Kansas City Internet eXchange - http://www.kcix.net
-
11-19-2013, 05:34 PM #5Newbie
- Join Date
- Nov 2013
- Location
- World
- Posts
- 5
on datashack.net i can only use the contact form
and the attack is dos and syn flood
anyway i've solved...
my zywall dropped 180 requet in less 2 min....
actually im sendin back all this request.....
-
11-19-2013, 05:37 PM #6
How do you know it's from Datashack and not spoofed?
Aaron Wendel
Wholesale Internet, Inc. - http://www.wholesaleinternet.net
Kansas City Internet eXchange - http://www.kcix.net
-
11-19-2013, 05:44 PM #7Web Hosting Master
- Join Date
- Feb 2006
- Posts
- 5,393
You should have a login to the billing/support platform: https://support.datashack.net/
How do you pay your invoices?WHMEasyBackup.com - Take Control Of Your Backups!
Complete Backup Solution For WHM Reseller Accounts
-
11-19-2013, 05:49 PM #8Aaron Wendel
Wholesale Internet, Inc. - http://www.wholesaleinternet.net
Kansas City Internet eXchange - http://www.kcix.net
-
11-19-2013, 05:52 PM #9Junior Guru
- Join Date
- Feb 2004
- Location
- Dubai
- Posts
- 192
I think what he means is, the attacker is using a datashack.net server to attack him!
-
11-19-2013, 05:55 PM #10Web Hosting Master
- Join Date
- Feb 2006
- Posts
- 5,393
WHMEasyBackup.com - Take Control Of Your Backups!
Complete Backup Solution For WHM Reseller Accounts
-
11-19-2013, 05:55 PM #11Web Hosting Master
- Join Date
- Mar 2013
- Posts
- 1,328
Did you disable recursion?
Your DNS server might have been amplifying an attack...
-
11-19-2013, 06:25 PM #12Newbie
- Join Date
- Nov 2013
- Location
- World
- Posts
- 5
recursion disabled....
and im not their client...
was googlin till now...have read "many beautiful things" about them...
-
11-19-2013, 06:40 PM #13Web Hosting Master
- Join Date
- Nov 2002
- Posts
- 4,667
From one IP? What is the IP?
-
11-19-2013, 06:41 PM #14Newbie
- Join Date
- Nov 2013
- Location
- World
- Posts
- 5
are 3 or 4...
wait take log
-
11-19-2013, 06:44 PM #15Newbie
- Join Date
- Nov 2013
- Location
- World
- Posts
- 5
found this from fail2ban
tomorrow im in office and take zywall log
Nov 18 09:19:46 mad-web sshd[1948]: Did not receive identification string from 198.204.255.36
Nov 18 09:24:03 mad-web sshd[2155]: reverse mapping checking getaddrinfo for welcomess.com [198.204.255.36] failed - POSSIBLE BREAK-IN ATTEMPT!
Nov 18 09:24:03 mad-web sshd[2155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.204.255.36 user=root
Nov 18 09:24:05 mad-web sshd[2155]: Failed password for root from 198.204.255.36 port 58417 ssh2
-
11-19-2013, 10:25 PM #16Newbie
- Join Date
- Nov 2013
- Posts
- 6
Doss Attack
Hello
Its possible its Doss Attack I've seen that before from that domain.
Try blocking all Incoming ICMP Packets.
-
11-19-2013, 10:39 PM #17Aspiring Evangelist
- Join Date
- Apr 2013
- Location
- Boston, MA
- Posts
- 400
You could block their IPs on the firewall.
List of IP blocks:
http://bgp.he.net/search?search%5Bse...&commit=Search
Similar Threads
-
KEEP AWAY from datashack.net!
By pirate2050 in forum Dedicated ServerReplies: 13Last Post: 11-21-2012, 10:29 AM -
Datashack.net ?????
By joeyc in forum Colocation, Data Centers, IP Space and NetworksReplies: 2Last Post: 04-30-2012, 07:46 PM -
my nightmare has no end for 15days and continue
By kteo in forum Dedicated ServerReplies: 5Last Post: 03-02-2012, 05:06 PM -
datashack.net - are they serious?
By silasistefan in forum Dedicated ServerReplies: 21Last Post: 01-23-2012, 10:30 PM -
Anyone use Datashack.net?
By SimplisticServers in forum Dedicated ServerReplies: 15Last Post: 05-23-2011, 01:06 PM