[PLUG] Web site URL points to localhost

2016-09-22 Thread Rich Shepard
   I realized this afternoon that I've not checked Brian Krebs' blog for a
few days so I tried to access www.krebsonsecurity.com. This pointed to
localhost, not his web site.

   A web search revealed that yesterday his site suffered a massive DDoS
attack, apparently from a IOT botnet. But, his site is supposedly up and
running. So why can't I access it?

   When I ping the URL it returns localhost. 'host krebsonsecurity.com
krebsonsecurity.com' tells me it has address 127.0.0.1. traceroute shows the
same thing: 1  localhost (127.0.0.1)  0.016 ms  0.003 ms  0.003 ms

   I would appreciate someone explaining why I might be seeing these results
and offer ideas how I might once again reach his web site.

Rich
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug


Re: [PLUG] Web site URL points to localhost

2016-09-22 Thread John Meissen

rshep...@appl-ecosys.com said:
>I would appreciate someone explaining why I might be seeing these results
> and offer ideas how I might once again reach his web site. 

Because that's what his nameserver is returning as his IP address. Not much you 
can do until that changes.


___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug


Re: [PLUG] Web site URL points to localhost

2016-09-22 Thread Rich Shepard
On Thu, 22 Sep 2016, John Meissen wrote:

> Because that's what his nameserver is returning as his IP address. Not
> much you can do until that changes.

John,

   I suspected as much. Could this be a result of the DDoS attack?

Thanks,

Rich
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug


Re: [PLUG] Web site URL points to localhost

2016-09-22 Thread Ali Corbin
His service provider (who was suffering the affects of the attack) unloaded
him.  Until he can get back up, your only recourse is to find caches of the
site.
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug


Re: [PLUG] Web site URL points to localhost

2016-09-22 Thread Smith, Cathy
I'm not surprised.  I was able to get to his site this morning, but not this 
afternoon.

-- 
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the 
U.S. Department of Energy

Phone: 509.375.2687
Fax:       509.375.4399
Email: cathy.sm...@pnnl.gov



-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Ali Corbin
Sent: Thursday, September 22, 2016 4:57 PM
To: Portland Linux/Unix Group 
Subject: Re: [PLUG] Web site URL points to localhost

His service provider (who was suffering the affects of the attack) unloaded 
him.  Until he can get back up, your only recourse is to find caches of the 
site.
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug


Re: [PLUG] Web site URL points to localhost

2016-09-22 Thread Rich Shepard
On Thu, 22 Sep 2016, Ali Corbin wrote:

> His service provider (who was suffering the affects of the attack)
> unloaded him. Until he can get back up, your only recourse is to find
> caches of the site.

Ali,

   I didn't search that far since I'm not well educated on DNS. I also did
not run dig which tells me it's a DNS issue.

   Checking site caches will not show me any articles he's published
recently. I check his site each morning to learn who else has been hacked
and whether I'm at risk.

Thanks for the insight,

Rich
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug


Re: [PLUG] Web site URL points to localhost

2016-09-22 Thread Ronald Chmara
https://web.archive.org/web/20160922124922/http://krebsonsecurity.com/ is
the last internet archive has, from 2016/09/22 (the comments section on the
article go to 09/21), so it's up to the last 24 hours or so.


On Thu, Sep 22, 2016 at 5:02 PM, Rich Shepard 
wrote:

> On Thu, 22 Sep 2016, Ali Corbin wrote:
>
> > His service provider (who was suffering the affects of the attack)
> > unloaded him. Until he can get back up, your only recourse is to find
> > caches of the site.
>Checking site caches will not show me any articles he's published
> recently. I check his site each morning to learn who else has been hacked
> and whether I'm at risk.
>
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug


Re: [PLUG] Web site URL points to localhost

2016-09-22 Thread Rich Shepard
On Thu, 22 Sep 2016, Ronald Chmara wrote:

> https://web.archive.org/web/20160922124922/http://krebsonsecurity.com/ is
> the last internet archive has, from 2016/09/22 (the comments section on
> the article go to 09/21), so it's up to the last 24 hours or so.

   Thanks. That's a good URL to know.

Rich
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug


[PLUG] Gkrellmd on RPi

2016-09-22 Thread Chuck Hast
Folks,
I have been trying to run gkrellmd on some RPi's. But when I try to connect
to the gkrellmd daemon, I get "broken server connection" I have installed
gkrellmd on some other Linux machines here and I am able to connect to
those and view the gkrellm output. Indeed I gan go from the RPi to the
laptops/desktops and I can connect to the gkrellmd in all.

Gkrellmd is running on the RPi's I can see it in TOP. I just can not
connect to it. Any ideas?
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug