On Sunday, April 19, 2020 at 9:21:44 AM UTC-4, Jeffrey Walton wrote: > > > On Friday, April 17, 2020 at 3:02:13 AM UTC-4, Jeffrey Walton wrote: >> >> >> The Crypto++ website is down. >> >> It appears GoDaddy is suspending the VM due to high cpu usage. GoDaddy >> writes it is due to Apache. >> >> We are not sure what is going on. We have not made any configuration >> changes since last summer. The only changes are documentation updates last >> week, which is copied new HTML files to a docs/ directory. >> >> I suspect something is sideways due to the OOM killer on the VM. OOM >> probably killed MySQL service, which wreaked havoc with Apache. >> >> At the moment I cannot SSH into the machine. >> > > The VM is available again. > > It looks like someone from China is hammering the web server with useless > requests, and it is causing a DoS: > > 59.64.129.175 - - [19/Apr/2020:08:53:53 -0400] "GET > /w/index.php?title=Special:WhatLinksHere&limit=50& > printable=yes HTTP/1.1" 301 311 > > We are trying to block the netblock, but the netfilter rule is not present > after rebooting the machine. > > iptables -A INPUT -s 59.64.128.0/19 -p TCP -j DROP > > We cannot ifdown/ifup because we lose access the the VM. We have to reboot > to machine to effect changes. > > We're now trying to figure out what is wrong with netfilter. >
Also see https://groups.google.com/d/msg/cryptopp-users/aDE9ter5mv0/YEi4fKSKAgAJ. -- You received this message because you are subscribed to "Crypto++ Users". More information about Crypto++ and this group is available at http://www.cryptopp.com and http://groups.google.com/forum/#!forum/cryptopp-users. --- You received this message because you are subscribed to the Google Groups "Crypto++ Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to cryptopp-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/cryptopp-users/c70b83e1-1993-4b40-83f4-2bc3c933897a%40googlegroups.com.
