Good morning everyone,
Does anyone have an idea what happened to Facebook DNS servers? "A" www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today.
on facebookdown.com were a lot of reports from around the world, now this site is also dead (to many mysql connections, which possibly means to many users...).
greets Marco
Same here, I already have like 30 tickets of students who complain that they can't reach facebook.
But facebook over ipv6 works correctly (https://www.v6.facebook.com/)
On 07.03.2012 08:23, Marco Fretz wrote:
Good morning everyone,
Does anyone have an idea what happened to Facebook DNS servers? "A" www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today.
on facebookdown.com were a lot of reports from around the world, now this site is also dead (to many mysql connections, which possibly means to many users...).
greets Marco
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 NotDashEscaped: You need GnuPG to verify this message
Am Mi den 7. Mär 2012 um 8:34 schrieb Olivier Beytrison:
Same here, I already have like 30 tickets of students who complain that they can't reach facebook.
Heureka, endlich hat sich jemand dessen angenommen und Gesichtsbuch vom Netz genommen. ;-)
But facebook over ipv6 works correctly (https://www.v6.facebook.com/)
Schade, doch nicht.
Gruß Klaus
Ps. Sorry, das konnte ich mir nicht verkneifen. ;-)
On 03/07/2012 08:38 AM, Klaus Ethgen wrote:
Am Mi den 7. Mär 2012 um 8:34 schrieb Olivier Beytrison:
Same here, I already have like 30 tickets of students who complain that they can't reach facebook.
Heureka, endlich hat sich jemand dessen angenommen und Gesichtsbuch vom Netz genommen. ;-)
But facebook over ipv6 works correctly (https://www.v6.facebook.com/)
Schade, doch nicht.
Sie engagieren sich einfach aktiv für die Einführung von IPv6. #ILike
IPv6-only-day at facebook :-)
Grüße, Stefan
looks like its back up:
dig A www.facebook.com
; <<>> DiG 9.8.1-RedHat-9.8.1-1.fc15 <<>> A www.facebook.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3178 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0
;; QUESTION SECTION: ;www.facebook.com. IN A
;; ANSWER SECTION: www.facebook.com. 80 IN A 69.63.190.10
;; AUTHORITY SECTION: www.facebook.com. 82019 IN NS glb1.facebook.com. www.facebook.com. 82019 IN NS glb2.facebook.com.
;; Query time: 9 msec ;; SERVER: 172.16.101.3#53(172.16.101.3) ;; WHEN: Wed Mar 7 09:04:45 2012 ;; MSG SIZE rcvd: 88
2012/3/7 Stefan Neufeind swinog.ch@stefan-neufeind.de:
On 03/07/2012 08:38 AM, Klaus Ethgen wrote:
Am Mi den 7. Mär 2012 um 8:34 schrieb Olivier Beytrison:
Same here, I already have like 30 tickets of students who complain that they can't reach facebook.
Heureka, endlich hat sich jemand dessen angenommen und Gesichtsbuch vom Netz genommen. ;-)
But facebook over ipv6 works correctly (https://www.v6.facebook.com/)
Schade, doch nicht.
Sie engagieren sich einfach aktiv für die Einführung von IPv6. #ILike
IPv6-only-day at facebook :-)
Grüße, Stefan
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Marco,
You can access facebook using ipv6...
Add this to your host file:
2620:0:1c18:0:face:b00c:0:2 www.facebook.com
Regards,
Vincent
Marco Fretz marco.fretz@gmail.com a écrit :
Good morning everyone,
Does anyone have an idea what happened to Facebook DNS servers? "A" www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today.
Yes, https://www.v6.facebook.com/ works. The interesting thing is that there is no information on facebook about the outage. Ok maybe they think it wouln't be read anyway :D
On Wed, Mar 7, 2012 at 8:34 AM, Vincent Magnin swinog@lx-soft.com wrote:
Marco,
You can access facebook using ipv6...
Add this to your host file:
2620:0:1c18:0:face:b00c:0:2 www.facebook.com
Regards,
Vincent
Marco Fretz marco.fretz@gmail.com a écrit :
Good morning everyone,
Does anyone have an idea what happened to Facebook DNS servers? "A" www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today.
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Maybe they didn't paid the bill by godaddy??
Am 07.03.2012 08:44, schrieb Marco Fretz:
Yes, https://www.v6.facebook.com/ works. The interesting thing is that there is no information on facebook about the outage. Ok maybe they think it wouln't be read anyway :D
On Wed, Mar 7, 2012 at 8:34 AM, Vincent Magninswinog@lx-soft.com wrote:
Marco,
You can access facebook using ipv6...
Add this to your host file:
2620:0:1c18:0:face:b00c:0:2 www.facebook.com
Regards,
Vincent
Marco Fretzmarco.fretz@gmail.com a écrit :
Good morning everyone,
Does anyone have an idea what happened to Facebook DNS servers? "A" www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today.
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Some of the other European operational mailers have been reporting the same.
I guess we all get the day off? ;-)
T
On 3/7/12 8:23 AM, Marco Fretz wrote:
Good morning everyone,
Does anyone have an idea what happened to Facebook DNS servers? "A" www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today.
on facebookdown.com were a lot of reports from around the world, now this site is also dead (to many mysql connections, which possibly means to many users...).
greets Marco
I am so glad that I deleted my account weeks ago :-D
cheers
Luke
Am 07.03.2012 08:23, schrieb Marco Fretz:
Good morning everyone,
Does anyone have an idea what happened to Facebook DNS servers? "A" www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today.
on facebookdown.com were a lot of reports from around the world, now this site is also dead (to many mysql connections, which possibly means to many users...).
greets Marco
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
I han't an account since 4 weeks... And I doesn't miss it... :-D Greetings Xaver ----- Original Message ----- From: "Andre Timmermann" andre.timmermann@nine.ch To: swinog@lists.swinog.ch Sent: Wednesday, March 07, 2012 5:33 PM Subject: Re: [swinog] Facebook down
Am Mittwoch, den 07.03.2012, 14:39 +0100 schrieb Lukas Eisenberger:
I am so glad that I deleted my account weeks ago :-D
Never had an account there ;)
Andre
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
On the Wed, Mar 07, 2012 at 05:33:09PM +0100, Andre Timmermann blubbered:
Hoi alle.
I am so glad that I deleted my account weeks ago :-D
Never had an account there ;)
Hey, don't play this down! It could easily have led into a bigger crisis than in 1996, when Take That broke up!!
CU, Venty
Am Mittwoch, den 07.03.2012, 20:39 +0100 schrieb Martin Ebnoether:
On the Wed, Mar 07, 2012 at 05:33:09PM +0100, Andre Timmermann blubbered:
Hoi alle.
I am so glad that I deleted my account weeks ago :-D
Never had an account there ;)
Hey, don't play this down! It could easily have led into a bigger crisis than in 1996, when Take That broke up!!
Hehe, do you remember tha famous "Längs! Nicht Quer!" by Harald Schmidt 1996 in the german TV?
http://www.focus.de/magazin/archiv/periskop-gar-nicht-komisch_aid_157064.htm...
Schmidts Suizidberatung für verzweifelte Fans der aufgelösten Teenie-Popgruppe „Take That“: Schmidt empfahl: Pulsadern durchschneiden, und zwar längs, nicht quer!
On monday we had a downstream customer with a hacked server (some bot net root kit). The server "attacked" four Facebook dns servers with 20 parallel udp 53 "floods", each about 2.5Mbps, no idea what packet content.
Customer told me that there was a known bug in Plesk. Maybe there really was a botnet attack against Facebook today :) does anyone have any specific information? would be interesting.
On Mar 7, 2012, at 2:39 PM, Lukas Eisenberger wrote:
I am so glad that I deleted my account weeks ago :-D
cheers
Luke
Am 07.03.2012 08:23, schrieb Marco Fretz:
Good morning everyone,
Does anyone have an idea what happened to Facebook DNS servers? "A" www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today.
on facebookdown.com were a lot of reports from around the world, now this site is also dead (to many mysql connections, which possibly means to many users...).
greets Marco
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
It looks like a proof of concept. i read on different sources, there are some complaining about try endless to login and allways land on the login page. that's a new form of password grabber ? some got strange answers like system offline try later others got a wrong ip...
strange and shure not only an DNS attack myself i have an "testaccount" on facebook, the only thing wich facebook know is an allways changing IP from some anon services :D The purpose is only to know how it works.
Roger
On monday we had a downstream customer with a hacked server (some bot net root kit). The server "attacked" four Facebook dns servers with 20 parallel udp 53 "floods", each about 2.5Mbps, no idea what packet content.
Customer told me that there was a known bug in Plesk. Maybe there really was a botnet attack against Facebook today :) does anyone have any specific information? would be interesting.
On Mar 7, 2012, at 2:39 PM, Lukas Eisenberger wrote:
I am so glad that I deleted my account weeks ago :-D
cheers
Luke
Am 07.03.2012 08:23, schrieb Marco Fretz:
Good morning everyone,
Does anyone have an idea what happened to Facebook DNS servers? "A" www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today.
on facebookdown.com were a lot of reports from around the world, now this site is also dead (to many mysql connections, which possibly means to many users...).
greets Marco
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
* on the Wed, Mar 07, 2012 at 05:37:06PM +0100, Marco Fretz wrote:
Customer told me that there was a known bug in Plesk. Maybe there really was a botnet attack against Facebook today :) does anyone have any specific information? would be interesting.
Ah, you mean THIS http://pastebin.com/AKF2qN4z That was deposited in the cgi-bin on various customer accounts of plesk-systems. Can't see any DNS-attack code in there, tough.
Cheers Seegras
On Mar 8, 2012, at 4:49 PM, Peter Keel wrote:
- on the Wed, Mar 07, 2012 at 05:37:06PM +0100, Marco Fretz wrote:
Customer told me that there was a known bug in Plesk. Maybe there really was a botnet attack against Facebook today :) does anyone have any specific information? would be interesting.
Ah, you mean THIS http://pastebin.com/AKF2qN4z That was deposited in the cgi-bin on various customer accounts of plesk-systems. Can't see any DNS-attack code in there, tough.
Could be that, no idea. I fortunatley don't have access to the customer servers :).
Cheers Seegras -- "Those who give up essential liberties for temporary safety deserve neither liberty nor safety." -- Benjamin Franklin "It's also true that those who would give up privacy for security are likely to end up with neither." -- Bruce Schneier
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
-
Adrian Kägi -
Andre Timmermann -
Klaus Ethgen -
Lukas Eisenberger -
Marco Fretz -
Martin Ebnoether -
Olivier Beytrison -
Peter Keel -
roger＠mgz.ch -
Stefan Neufeind -
Thomas Kernen -
Vincent Magnin -
Xaver Aerni