Might be silly but make sure the logs are on log rotate so the system doesn’t run out of space.
On Sun, Apr 19, 2020 at 7:21 AM Jeffrey Walton <noloa...@gmail.com> wrote: > > On Friday, April 17, 2020 at 3:02:13 AM UTC-4, Jeffrey Walton wrote: >> >> >> The Crypto++ website is down. >> >> It appears GoDaddy is suspending the VM due to high cpu usage. GoDaddy >> writes it is due to Apache. >> >> We are not sure what is going on. We have not made any configuration >> changes since last summer. The only changes are documentation updates last >> week, which is copied new HTML files to a docs/ directory. >> >> I suspect something is sideways due to the OOM killer on the VM. OOM >> probably killed MySQL service, which wreaked havoc with Apache. >> >> At the moment I cannot SSH into the machine. >> > > The VM is available again. > > It looks like someone from China is hammering the web server with useless > requests, and it is causing a DoS: > > 59.64.129.175 - - [19/Apr/2020:08:53:53 -0400] "GET > /w/index.php?title=Special:WhatLinksHere&limit=50& > printable=yes HTTP/1.1" 301 311 > > We are trying to block the netblock, but the netfilter rule is not present > after rebooting the machine. > > iptables -A INPUT -s 59.64.128.0/19 -p TCP -j DROP > > We cannot ifdown/ifup because we lose access the the VM. We have to reboot > to machine to effect changes. > > We're now trying to figure out what is wrong with netfilter. > > Jeff > > -- > You received this message because you are subscribed to "Crypto++ Users". > More information about Crypto++ and this group is available at > http://www.cryptopp.com and > http://groups.google.com/forum/#!forum/cryptopp-users. > --- > You received this message because you are subscribed to the Google Groups > "Crypto++ Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to cryptopp-users+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/cryptopp-users/7e4e9f82-6f69-44a2-8d5c-91eac49d84d8%40googlegroups.com > <https://groups.google.com/d/msgid/cryptopp-users/7e4e9f82-6f69-44a2-8d5c-91eac49d84d8%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to "Crypto++ Users". More information about Crypto++ and this group is available at http://www.cryptopp.com and http://groups.google.com/forum/#!forum/cryptopp-users. --- You received this message because you are subscribed to the Google Groups "Crypto++ Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to cryptopp-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/cryptopp-users/CACt5jOmByHXSHNh3t37oU8%3D%3D0rYgsLpzHQfYUtJjLU_cs-dZRg%40mail.gmail.com.
