AVN: NATS/TMM Breached for More Than a Year

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • JFK
    FUBAR the ORIGINATOR
    • Jan 2002
    • 67373

    #16
    Originally posted by Tricky007
    interesting
    indeed

    FUBAR Webmasters - The FUBAR Times - FUBAR Webmasters Mobile - FUBARTV.XXX
    For promo opps contact jfk at fubarwebmasters dot com

    Comment

    • Robbie
      Leaner, Meaner, Faster
      • Aug 2002
      • 20960

      #17
      Originally posted by SmokeyTheBear
      hmm i didnt read that it took the server " to it's knees"

      infact doesnt it say "it is slowing the servers down a little" ?

      either way , its certainly possible for one ip to cause big enough problems to notice, especially if they are using the nats admin panel with one of nats passwords
      Here it is for ya, near the beginning of the story:
      Another said his network of Web servers developed severe performance issues "over a year ago." He said investigation by his hosting company revealed repeated access attempts by someone using a NATS admin-level username and password.
      "The servers were going down like 10-15 times a day," he said. "Our hosting company stabilized them and secured them by blocking IP addresses, unnecessary requests, et cetera. They said it had been hacked [by someone] in the main office."
      -Robbie
      ClaudiaMarie.Com

      Comment

      • RP Fade
        Confirmed User
        • Sep 2003
        • 3343

        #18
        good article..
        HomemadeCash.com - Homemade & GF sites powered by NScash.com
        HomemadeVideoPass.com - The only all homemade mega site
        OurHomemadePorno.com - Real couples fucking on camera
        Contact ICQ: 400-786-531 Email: fade AT nscash.com

        Comment

        • StarkReality
          Confirmed User
          • May 2004
          • 4444

          #19
          Wow, sounds like a real clusterfuck

          Comment

          • gleem
            Confirmed User
            • Jun 2001
            • 5593

            #20
            how can someone trying to log in slow a server down? Unless it's attempted multiple times a minute from several IPs, I can't imagine it would have any effect on a server no matter how crappy the server is. The only thing that might have effected the server is if he did get in and was dumping the database.

            There. I just tried logging in with the wrong user/pass on my NATS admin, and server load didn't go up at all.. LOL




            Contact me: \\// E: webmaster /at/ unprofessional.com

            Comment

            • minusonebit
              So Fucking Banned
              • Feb 2006
              • 7391

              #21
              Originally posted by Robbie
              "When everything hit the boards, we went back to check [our server logs] and found the same admin account trying to access our servers every hour," he said Friday. "The IP [address] block was the same one that was blocked over a year ago, so [the person using the account] couldn't get in. It is slowing down the servers a little bit, but they're not actually getting in."

              That is a quote from the story... So supposedly some big site had their servers brought down to their knees by ONE IP address attempting to log in and fail? Does anybody ever proof read or use common sense with these stories? This is almost as factual as a Bill OReilly story.
              You obviously don't read well, do you? They said that by blocking the IP of the attacker, it was slowing the servers down a bit. Which it would, if you have 100s of 1000s of hits on a major box and you are running each of those against a blacklist, it will cause some overhead to be consumed doing that.

              Comment

              • Robbie
                Leaner, Meaner, Faster
                • Aug 2002
                • 20960

                #22
                No, they said it took their servers down 10 to 15 times a day! LOL! And it was someone hacking from the "Main Office" Whatever the fuck that means.
                -Robbie
                ClaudiaMarie.Com

                Comment

                • Robbie
                  Leaner, Meaner, Faster
                  • Aug 2002
                  • 20960

                  #23
                  Originally posted by minusonebit
                  You obviously don't read well, do you? They said that by blocking the IP of the attacker, it was slowing the servers down a bit. Which it would, if you have 100s of 1000s of hits on a major box and you are running each of those against a blacklist, it will cause some overhead to be consumed doing that.
                  Please don't try to talk about things you don't understand.
                  -Robbie
                  ClaudiaMarie.Com

                  Comment

                  • SmokeyTheBear
                    ►SouthOfHeaven
                    • Jun 2004
                    • 28609

                    #24
                    Originally posted by Robbie
                    Here it is for ya, near the beginning of the story:
                    Another said his network of Web servers developed severe performance issues "over a year ago." He said investigation by his hosting company revealed repeated access attempts by someone using a NATS admin-level username and password.
                    "The servers were going down like 10-15 times a day," he said. "Our hosting company stabilized them and secured them by blocking IP addresses, unnecessary requests, et cetera. They said it had been hacked [by someone] in the main office."
                    i fail to see anything about bringing the server "to its knees" perhaps my old eyes decieve me

                    invisible ink ?

                    severe performance issues does NOT equal bringing a server to its knees. if a site is up and able to be knocked off that would lead me to believe it certainly wasn't "on its knees"

                    and like i said regardless it is certainly possible for one ip to cause "severe performance issues" so the point is kinda moot right ?
                    hatisblack at yahoo.com

                    Comment

                    • Robbie
                      Leaner, Meaner, Faster
                      • Aug 2002
                      • 20960

                      #25
                      Originally posted by SmokeyTheBear
                      i fail to see anything about bringing the server "to its knees" perhaps my old eyes decieve me

                      invisible ink ?

                      severe performance issues does NOT equal bringing a server to its knees. if a site is up and able to be knocked off that would lead me to believe it certainly wasn't "on its knees"

                      and like i said regardless it is certainly possible for one ip to cause "severe performance issues" so the point is kinda moot right ?
                      Here you go: "The servers were going down like 10-15 times a day"
                      -Robbie
                      ClaudiaMarie.Com

                      Comment

                      • baddog
                        So Fucking Banned
                        • Apr 2001
                        • 107089

                        #26
                        Originally posted by SmokeyTheBear
                        infact doesnt it say "it is slowing the servers down a little" ?
                        "The servers were going down like 10-15 times a day," he said. "Our hosting company stabilized them and secured them by blocking IP addresses, unnecessary requests, et cetera. They said it had been hacked [by someone] in the main office."

                        Comment

                        • SmokeyTheBear
                          ►SouthOfHeaven
                          • Jun 2004
                          • 28609

                          #27
                          Originally posted by gleem
                          how can someone trying to log in slow a server down? Unless it's attempted multiple times a minute from several IPs, I can't imagine it would have any effect on a server no matter how crappy the server is.
                          Originally posted by gleem
                          The only thing that might have effected the server is if he did get in and was dumping the database.
                          i think you just answered your own question
                          hatisblack at yahoo.com

                          Comment

                          • Robbie
                            Leaner, Meaner, Faster
                            • Aug 2002
                            • 20960

                            #28
                            Educate me...how does ONE IP attempting to log in and failing bring servers down 10 to 15 times a day. I honestly don't know how that would work.
                            -Robbie
                            ClaudiaMarie.Com

                            Comment

                            • SmokeyTheBear
                              ►SouthOfHeaven
                              • Jun 2004
                              • 28609

                              #29
                              Originally posted by Robbie
                              Educate me...how does ONE IP attempting to log in and failing bring servers down 10 to 15 times a day. I honestly don't know how that would work.
                              well first you would have to learn to read properly.

                              they didnt block the user until AFTER they had the performance issues

                              ""The servers were going down like 10-15 times a day," he said. "Our hosting company stabilized them and secured them by blocking IP addresses"

                              once the user was blocked the server stabilized.

                              the user did not "fail" to get in , they got in and were dumping databases causing the server to stall, they got busted got blocked , the server returned to normal other than failed requests , nats was notified .
                              hatisblack at yahoo.com

                              Comment

                              • notoldschool
                                Confirmed User
                                • Aug 2007
                                • 5687

                                #30
                                i fucking hate stories where they dont name anyone who is making the allegations. All this program owner says this and that but never say who they are. It sounds contrived to me.
                                No doubt one may quote history to support any cause, as the devil quotes scripture.
                                -- Learned Hand

                                http://www.bjpenn.com

                                Comment

                                Working...