Re: [swinog] Facebook down
On Mar 8, 2012, at 4:49 PM, Peter Keel wrote: * on the Wed, Mar 07, 2012 at 05:37:06PM +0100, Marco Fretz wrote: Customer told me that there was a known bug in Plesk. Maybe there really was a botnet attack against Facebook today :) does anyone have any specific information? would be interesting. Ah, you mean THIS http://pastebin.com/AKF2qN4z That was deposited in the cgi-bin on various customer accounts of plesk-systems. Can't see any DNS-attack code in there, tough. Could be that, no idea. I fortunatley don't have access to the customer servers :). Cheers Seegras -- Those who give up essential liberties for temporary safety deserve neither liberty nor safety. -- Benjamin Franklin It's also true that those who would give up privacy for security are likely to end up with neither. -- Bruce Schneier ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Facebook down
* on the Wed, Mar 07, 2012 at 05:37:06PM +0100, Marco Fretz wrote: Customer told me that there was a known bug in Plesk. Maybe there really was a botnet attack against Facebook today :) does anyone have any specific information? would be interesting. Ah, you mean THIS http://pastebin.com/AKF2qN4z That was deposited in the cgi-bin on various customer accounts of plesk-systems. Can't see any DNS-attack code in there, tough. Cheers Seegras -- Those who give up essential liberties for temporary safety deserve neither liberty nor safety. -- Benjamin Franklin It's also true that those who would give up privacy for security are likely to end up with neither. -- Bruce Schneier ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Facebook down
Maybe they didn't paid the bill by godaddy?? Am 07.03.2012 08:44, schrieb Marco Fretz: Yes, https://www.v6.facebook.com/ works. The interesting thing is that there is no information on facebook about the outage. Ok maybe they think it wouln't be read anyway :D On Wed, Mar 7, 2012 at 8:34 AM, Vincent Magninswi...@lx-soft.com wrote: Marco, You can access facebook using ipv6... Add this to your host file: 2620:0:1c18:0:face:b00c:0:2 www.facebook.com Regards, Vincent Marco Fretzmarco.fr...@gmail.com a écrit : Good morning everyone, Does anyone have an idea what happened to Facebook DNS servers? A www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Freundliche Grüsse Adrian Kägi System Engineering Teamleiter ZAPP AG Bahnhofstr. 28, 3076 Worb Telefon +41 31 710 34 23 Fax +41 31 710 34 25 adrian.ka...@medianet.ch http://www.zapp.ch Surfen ohne Grenzen ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Facebook down
looks like its back up: dig A www.facebook.com ; DiG 9.8.1-RedHat-9.8.1-1.fc15 A www.facebook.com ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 3178 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.facebook.com. IN A ;; ANSWER SECTION: www.facebook.com. 80 IN A 69.63.190.10 ;; AUTHORITY SECTION: www.facebook.com. 82019 IN NS glb1.facebook.com. www.facebook.com. 82019 IN NS glb2.facebook.com. ;; Query time: 9 msec ;; SERVER: 172.16.101.3#53(172.16.101.3) ;; WHEN: Wed Mar 7 09:04:45 2012 ;; MSG SIZE rcvd: 88 2012/3/7 Stefan Neufeind swinog...@stefan-neufeind.de: On 03/07/2012 08:38 AM, Klaus Ethgen wrote: Am Mi den 7. Mär 2012 um 8:34 schrieb Olivier Beytrison: Same here, I already have like 30 tickets of students who complain that they can't reach facebook. Heureka, endlich hat sich jemand dessen angenommen und Gesichtsbuch vom Netz genommen. ;-) But facebook over ipv6 works correctly (https://www.v6.facebook.com/) Schade, doch nicht. Sie engagieren sich einfach aktiv für die Einführung von IPv6. #ILike IPv6-only-day at facebook :-) Grüße, Stefan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Facebook down
On 7 Mar 2012 at 9:06, Marco Fretz wrote: looks like its back up: well B.O.F.H. seems to getting old ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Facebook down
I am so glad that I deleted my account weeks ago :-D cheers Luke Am 07.03.2012 08:23, schrieb Marco Fretz: Good morning everyone, Does anyone have an idea what happened to Facebook DNS servers? A www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today. on facebookdown.com were a lot of reports from around the world, now this site is also dead (to many mysql connections, which possibly means to many users...). greets Marco ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Facebook down
Am Mittwoch, den 07.03.2012, 14:39 +0100 schrieb Lukas Eisenberger: I am so glad that I deleted my account weeks ago :-D Never had an account there ;) Andre ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Facebook down
On the Wed, Mar 07, 2012 at 05:33:09PM +0100, Andre Timmermann blubbered: Hoi alle. I am so glad that I deleted my account weeks ago :-D Never had an account there ;) Hey, don't play this down! It could easily have led into a bigger crisis than in 1996, when Take That broke up!! CU, Venty -- Hat pazifi sein Sofa schon? http://hat-pazifi-sein-sofa-schon.semmel.ch/ ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Facebook down
Am Mittwoch, den 07.03.2012, 20:39 +0100 schrieb Martin Ebnoether: On the Wed, Mar 07, 2012 at 05:33:09PM +0100, Andre Timmermann blubbered: Hoi alle. I am so glad that I deleted my account weeks ago :-D Never had an account there ;) Hey, don't play this down! It could easily have led into a bigger crisis than in 1996, when Take That broke up!! Hehe, do you remember tha famous Längs! Nicht Quer! by Harald Schmidt 1996 in the german TV? http://www.focus.de/magazin/archiv/periskop-gar-nicht-komisch_aid_157064.html Schmidts Suizidberatung für verzweifelte Fans der aufgelösten Teenie-Popgruppe „Take That“: Schmidt empfahl: Pulsadern durchschneiden, und zwar längs, nicht quer! -- Mit freundlichen Gruessen Andre Timmermann Nine Internet Solutions AG, Albisriederstr. 243c, CH-8047 Zuerich Tel +41 44 637 40 00 | Direkt +41 44 637 40 06 | Fax +41 44 637 40 01 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Facebook down
Same here, I already have like 30 tickets of students who complain that they can't reach facebook. But facebook over ipv6 works correctly (https://www.v6.facebook.com/) On 07.03.2012 08:23, Marco Fretz wrote: Good morning everyone, Does anyone have an idea what happened to Facebook DNS servers? A www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today. on facebookdown.com were a lot of reports from around the world, now this site is also dead (to many mysql connections, which possibly means to many users...). greets Marco ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Olivier Beytrison Network Security Engineer, HES-SO Fribourg Mobile: +41 (0)78 619 73 53 Mail: oliv...@heliosnet.org ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Facebook down
Marco, You can access facebook using ipv6... Add this to your host file: 2620:0:1c18:0:face:b00c:0:2 www.facebook.com Regards, Vincent Marco Fretz marco.fr...@gmail.com a écrit : Good morning everyone, Does anyone have an idea what happened to Facebook DNS servers? A www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Facebook down
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 NotDashEscaped: You need GnuPG to verify this message Am Mi den 7. Mär 2012 um 8:34 schrieb Olivier Beytrison: Same here, I already have like 30 tickets of students who complain that they can't reach facebook. Heureka, endlich hat sich jemand dessen angenommen und Gesichtsbuch vom Netz genommen. ;-) But facebook over ipv6 works correctly (https://www.v6.facebook.com/) Schade, doch nicht. Gruß Klaus Ps. Sorry, das konnte ich mir nicht verkneifen. ;-) -- Klaus Ethgen http://www.ethgen.ch/ pub 4096R/4E20AF1C 2011-05-16 Klaus Ethgen kl...@ethgen.de Fingerprint: 85D4 CA42 952C 949B 1753 62B3 79D0 B06F 4E20 AF1C -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iQGcBAEBCgAGBQJPVxCPAAoJEKZ8CrGAGfasHlsMAIvoamp4lzhIiqG5MYb8LID4 s0OHYt+YC+9yVCPbAFwmUUP2ZP4BYPKf+5AfHZU3NUC/o0UObuH5hjLelFUMLT4x BY5aZH2IELP87AEL9IVbW9bWqpqqaP95lA9mPJZYxItqBmwjLfl5VoqygVZaG1Fv K71pID8HiDifmAjI+sUKaD0gXUe9UxcGdAQ10l/qpBU4LJBAXE63y+BeLGX2QQvT j9kvIGH7p4q12fm5tw+60Bi/M2BLMJhI8BRYWf2EN4tpa4yQETekzd7iIuGrLQ5U qatrtPFBheQVJI12F+tl2UcEYoAB/4vmBlxnIcni69kfeclJULKVzzfMh0PhFkdu 2eRUhvS75JseqUmAovpXPPWsDj2kxufe1DFzXdPWlrKK3fuXf1aasEFgmYw7KgSt tI35HMHHWq5B9ZNt/Le0MLYd8YNy0wSv8fh4n6ZFzvoO4FJt1UmMfjOEfIHjuM3j Cl3HBiCZWAKEBhbPFfKdlcZsY2OupOh80KAH3g018A== =qpAJ -END PGP SIGNATURE- ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Facebook down
Some of the other European operational mailers have been reporting the same. I guess we all get the day off? ;-) T On 3/7/12 8:23 AM, Marco Fretz wrote: Good morning everyone, Does anyone have an idea what happened to Facebook DNS servers? A www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today. on facebookdown.com were a lot of reports from around the world, now this site is also dead (to many mysql connections, which possibly means to many users...). greets Marco ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Facebook down
On 03/07/2012 08:38 AM, Klaus Ethgen wrote: Am Mi den 7. Mär 2012 um 8:34 schrieb Olivier Beytrison: Same here, I already have like 30 tickets of students who complain that they can't reach facebook. Heureka, endlich hat sich jemand dessen angenommen und Gesichtsbuch vom Netz genommen. ;-) But facebook over ipv6 works correctly (https://www.v6.facebook.com/) Schade, doch nicht. Sie engagieren sich einfach aktiv für die Einführung von IPv6. #ILike IPv6-only-day at facebook :-) Grüße, Stefan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Facebook down
Yes, https://www.v6.facebook.com/ works. The interesting thing is that there is no information on facebook about the outage. Ok maybe they think it wouln't be read anyway :D On Wed, Mar 7, 2012 at 8:34 AM, Vincent Magnin swi...@lx-soft.com wrote: Marco, You can access facebook using ipv6... Add this to your host file: 2620:0:1c18:0:face:b00c:0:2 www.facebook.com Regards, Vincent Marco Fretz marco.fr...@gmail.com a écrit : Good morning everyone, Does anyone have an idea what happened to Facebook DNS servers? A www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
