Internet Under Attack

katinamarie72 · Post by **katinamarie72** » Sat Jan 25, 2003 5:44 pm

This was on the news and online at CNN:

http://www.cnn.com/2003/TECH/internet/01/2...tack/index.html

Archived topic from Iceteks, old topic ID:215, old post ID:699

Red Squirrel · Post by **Red Squirrel** » Sat Jan 25, 2003 6:13 pm

That can't be good, but fromthe sounds of it, it's another Microsoft iis security hole... so we are safe. Can't wait to look at my logs tonight to see how often it hit though.

Rule of thumb: use apache ..on Unix (I'm not doing that yet though).

It's getting bad out there, that's for sure. I guess it must be fun to program something and have it featured all over the news.

I'll stick with Prank Pack...

Archived topic from Iceteks, old topic ID:215, old post ID:706

katinamarie72 · Post by **katinamarie72** » Sat Jan 25, 2003 7:20 pm

The Anything forum got hit with the bug!!!!

This site must not have got hit because your server is in Canada?? Thats what it seems like to me,by reading this article.

http://www.invisionpower.com/?125down

Archived topic from Iceteks, old topic ID:215, old post ID:710

Chris Vogel · Post by **Chris Vogel** » Sat Jan 25, 2003 7:25 pm

Katina, I feel a bit homeless since I can't post at my internet home.........

Chris feel SAD.

I really like this--

-- Emoticon. Let's get Magic to add it......

Archived topic from Iceteks, old topic ID:215, old post ID:711

Red Squirrel · Post by **Red Squirrel** » Sat Jan 25, 2003 7:32 pm

I don't think it's why, but most servers are US based so it's a coincidence.

It's because I'm not using Microsoft SQL... I guess the anything forums uses that...

There's a lot of other sites that got affected too. It's pretty bad, it's almost like a terrorist attack or something, but at least no one is physically dying though.

Chris, you don't have to feel homeless, there's always here, and we should not get hit with the worm.

I do notice it's slower though, we must be getting a lot of attempts which consume a certain amount of bandwidth, but not enough to bring it down - unless we get too many attempts...

Archived topic from Iceteks, old topic ID:215, old post ID:717

katinamarie72 · Post by **katinamarie72** » Sat Jan 25, 2003 7:36 pm

nope not physically !!

Archived topic from Iceteks, old topic ID:215, old post ID:719

Chris Vogel · Post by **Chris Vogel** » Sat Jan 25, 2003 7:36 pm

The CNN report said that it didn't carry code that would cause data lose, so that is good.

Archived topic from Iceteks, old topic ID:215, old post ID:720

Red Squirrel · Post by **Red Squirrel** » Sat Jan 25, 2003 7:37 pm

Yep, for sure. I noticed that we are getting parse errors again though, but I now know it's simply caused by the slow down, as this win98 installation does not take much to slow it down... wait a sec, a win98 server withstanding a big worldwide worm like this? Wow!

Archived topic from Iceteks, old topic ID:215, old post ID:721

Chris Vogel · Post by **Chris Vogel** » Sat Jan 25, 2003 7:50 pm

Red Squirrel wrote: Yep, for sure. I noticed that we are getting parse errors again though, but I now know it's simply caused by the slow down, as this win98 installation does not take much to slow it down... wait a sec, a win98 server withstanding a big worldwide worm like this? Wow!

That is a miracle... I don't really find Win98 good for anything...

Archived topic from Iceteks, old topic ID:215, old post ID:725

Red Squirrel · Post by **Red Squirrel** » Sat Jan 25, 2003 8:01 pm

You'd think this server would be crashed so bad with this attack. lol. I had over 40 requests from a blocked IP today, but it's an IP from another case that is now closed... but it's still strange. I also blocked the UDP port mentioned in the advisory posted in the virus section, it can also be found on the home page in the virus advisory section.

I'll for sure be writting an article to put on the Reliexec home page when all this is done. With my plans to start a hosting company, it sure will help.

Archived topic from Iceteks, old topic ID:215, old post ID:730

jryan · Post by **jryan** » Wed Feb 05, 2003 12:12 am

Re: The fact that we don't use Microsoft SQL Server, instead we use Apache

Just a little clarification, Microsoft SQL Server is used for databases, we just happen to use another bit of SQL database software integrated into our Server Package (which isn't configured perfectly, but that's another thing that we've had a few issues with) for our forum database which is why we didn't get hit. Alot of sites DO use Microsoft IIS, which is another separate item from SQL Server, which is more easily configured that Apache's HTTP Server, but not us. We've opted for OpenSource, especially when we make the transition to something UNIX-Based, unless Red actually finds UNIX. So far, it's Red Hat Linux, which is built on UNIX, or something else more stable than Windows. Just F.Y.I

Archived topic from Iceteks, old topic ID:215, old post ID:1271

Red Squirrel · Post by **Red Squirrel** » Wed Feb 05, 2003 1:33 am

Most likely freebsd now, as I downloaded the ISOs and I just need to burn them, which I'll do the last minute in caseI change my mind (don't want to waste 3 cd's you know

)

However, since it's designed for i386 architecture, my new server will have to be intel based. With the bugs in P4's I don't want to take a chance, and P3's are pretty much stopped (but I might be able to find some for cheap so that's the good news) and I think they only go up to 1GHz, but now we are on 450 so how can I complain.

Unix will also make things 10 times faster - I'll learn the non-gui way of using it and run it like that. I can't wait. But I have to

$$$$$$$.

Archived topic from Iceteks, old topic ID:215, old post ID:1273

jryan · Post by **jryan** » Wed Feb 05, 2003 2:16 am

Good luck... you may want to keep a Windows box as a backup server in case anything happens... BTW, FreeBSD is UNIX-based, as are most things with the exception of Windows. Just something to keep in mind, as you keep talking like you're gonna use straight UNIX.

Archived topic from Iceteks, old topic ID:215, old post ID:1274