[emanicslab] Suspicious Activity on EmanicsLab nodes host1-plb.loria.fr and host2-plb.loria.fr

[David Hausheer]

Dear EmanicsLab users,

we have some suspicious activity ongoing on EmanicsLab nodes 
host1-plb.loria.fr and host2-plb.loria.fr

Since those of you addressed explicitly in the Email header are running 
experiments including those nodes, I would like to understand if the 
traffic originates from any of your slices.

Thus, please take a look at the attached log file, and let me know if 
the hostnames are familiar to you. It may also be that one of your 
slices has been hacked, in which case we would need to disable it.

Thus, please inform me as soon as possible if

a) you know that your slice IS the source of those connections
b) you know that your slice is NOT the source of those connections
c) you don't know (your slice may be hacked)

Thanks you and best regards
David

On 18.12.2013 16:09, Emmanuel Nataf wrote:
> Hello,
>
> The hosts : host1-plb.loria.fr <http://host1-plb.loria.fr/> and
> host2-plb.loria.fr <http://host2-plb.loria.fr/> are down for security
> reason.
> Since last week a very large amount of connexions, coming from
> everywhere (and probably not all registered nodes) threaten our firewall.
> I join the firewal log.
>
>
>
> Regards
>
> E. Nataf
> INRIA Nodes

-- 
Prof. Dr. David Hausheer

Technische Universitaet Darmstadt
Dept. of Electrical Engineering & Information Technology

Rundeturmstr. 10, Building S3/20, Room 225
64283 Darmstadt, Germany
Phone: +49 6151 16 4280
Fax: +49 6151 16 6152
E-Mail: hausheer at ps.tu-darmstadt.de
Web: http://www.ps.tu-darmstadt.de/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mozilla.pdf
Type: application/pdf
Size: 65891 bytes
Desc: not available
URL: <http://lists.ifi.uzh.ch/pipermail/emanicslab/attachments/20131218/a1562df2/attachment-0001.pdf>