RAAAAH, Offline for almost 3 days now?!

[stefanhendriks]

I sincerely hope this had a good reason because i find it unlogical that such a system can fail for 3 days. Even MS Windows can stay up for a freaking 3 hours! o_O

[Pierre-Marie Baty]

did someone launch a compile or something very memory-intensive ?

and who changed the root password ? I want to log in to see the logs

[Onno Kreuzinger]

Help Guys, i need access to more !
Nova is bussy, the root pwd. has been reset [stock kernel was also installed], i can backup most files using my user ftp account, but i can't backup the db.
Please come to the IRC asap , THX

[Terran]

got hacked?

[TruB]

hackers usually leave a mark.. like this site has been hacked by...

[Pierre-Marie Baty]

we're investigating... we're logged on IRC right now, and 2 of us are logged in the server... as far as we see it it sounds like a hardware failure

[Terran]

@TruB:
That's what "script kiddies" do, not more "professional" hackers.

@PMB:
I'l join @ IRC, maybe I can help you

[TruB]

well.. why would pro hack the server bots united use?.. if they did.. all i could think of is that théy use it as spam server and then its not very smart to let every body know the server has problem by make it useless..

like i see it pro hacker usually never do any harm..

[Terran]

Abusing hacked computers (not only servers) as spam hosts is very common those days but not the only reason why anyone would hack into a system.
Leaving the system in an unusable state might be caused by some mistakes of the hacker (well maybe it was a script kiddie ).
But those are just speculations only a in depth analysis could bring up the truth. Maybe http://www.porcupine.org/forensics/tct.html will be helpful...

[Onno Kreuzinger]

To stop rumors about Hackers, the server was never compromised, even with local ssh user account is is not hackable within a reasonable amount of time. No ssl or ssh holes, no local kernel hole to be used with ease.

For now i can say, we had/have trouble with the swap system. These problems are nasty, because getting the server stuck too often makes the hoster (reboot guy) "not amused", so we switched to a "stock" security kernel offers by them (we got basicaly no chioce) after too many problems in a too short amount oftime. For now some minor services will be stoped until further investigation on the swap issue. I try to go on that tonight, but at least until thursday something will happen.

Cherers memed