Win19 cl2 is seeing some packetloss.

Ashish

Ashish

Super Moderator
Staff member
Win19 cl2 is seeing some packet loss. It seems there is a network attack on one of them making some network slowness to the rest of servers, we are tracing it down
 
CL2 - Win19 is up now, there may be moments of packet loss as we test on other machine but it is not for long duration.
 
Win19 has been good for some hours but just as we got win39 stabilized, Win19 is losing packets again. This is not related to win39 cl1 incident at this time. Being checked.
 
As soon as the shared IP of win19 is live, attacks return. Having a much harder time finding the target site here on this one, complex situation being the shared IP address.
 
at the moment I am going to leave it with some packetloss while I continue searching through logs.
 
Rebooting Win19 now after some changes, it may take a little while to come up, as it is applying some updates with it as well.
 
So what we are seeing here is a lot of outdated Wordpress installs being abused, scanned, hacked, files injected, being used to scan other networks sometimes, and continual brute force attempts. These requests are coming on several domains and as we get them blocked, and the wordpress files removed, the packetloss gets better.

There's still an occassional time of packetloss as it finds a new wordpress old install and abuses it, but overall it is much more stable.
 
You must log in or register to reply here.
Back
Top