Comments on: Google hearts me again http://www.accphotos.com/blog/2008/01/28/google-hearts-me-again/ blog about ACC sports and photography Tue, 06 Jan 2009 09:37:24 +0000 http://wordpress.org/?v=2.7 hourly 1 By: Christopher Blunck http://www.accphotos.com/blog/2008/01/28/google-hearts-me-again/comment-page-1/#comment-3787 Christopher Blunck Mon, 28 Jan 2008 19:40:38 +0000 http://www.accphotos.com/blog/2008/01/28/google-hearts-me-again/#comment-3787 Wow Peyton, I'm sorry to hear that. I'm not at all surprised it happened to you though. I'm sure your site (http://www.accphotos.com/) receives a ton of traffic, and those sites tend to be the ones that people go after. I try to stay out of hosting public sites unless it's just static pages. Apache is pretty resistant to attack, but every now and then a new vulnerability is discovered. It's difficult to keep up to date with all the latest patches, and I like being able to pay people more qualified than me to maintain something. A few weeks ago we installed MySQL server on an older Linux server (I think it was running Fedora 5). Somebody accidentally set it up to listen on all network interfaces rather than localhost. About 11 hours later somebody overpowered the MySQL server and compromised the server. From there they launched a bunch of attacks against other networks and started spewing out spam. Our subnet was blackholed by a bunch of networks and our SMTP servers (google) were on the blacklist by several spam houses. It took us several weeks before we had fully recovered. It was such a pain in the neck. From now on we try to rely on others to host our infrastructure. I'm happy you hear you climbed back into Google's index. Wow Peyton, I’m sorry to hear that. I’m not at all surprised it happened to you though. I’m sure your site (http://www.accphotos.com/) receives a ton of traffic, and those sites tend to be the ones that people go after.

I try to stay out of hosting public sites unless it’s just static pages. Apache is pretty resistant to attack, but every now and then a new vulnerability is discovered. It’s difficult to keep up to date with all the latest patches, and I like being able to pay people more qualified than me to maintain something.

A few weeks ago we installed MySQL server on an older Linux server (I think it was running Fedora 5). Somebody accidentally set it up to listen on all network interfaces rather than localhost. About 11 hours later somebody overpowered the MySQL server and compromised the server. From there they launched a bunch of attacks against other networks and started spewing out spam. Our subnet was blackholed by a bunch of networks and our SMTP servers (google) were on the blacklist by several spam houses.

It took us several weeks before we had fully recovered. It was such a pain in the neck. From now on we try to rely on others to host our infrastructure.

I’m happy you hear you climbed back into Google’s index.

]]>