SHOUTcast hacked under Linux?

00null00 · 5th April 2001, 19:16

Help me! I run a Linux box as a server, and for three days in a row now it's gotten completely offline unexpectedly. It's Redhat v7.0 with the latest version of SHOUTcast. It's a 486 with a 133 Pentium Overdrive chip and 16 megs of ram. I know that's very pitiful but remember, it's Linux, and it takes a lot of power to encode and decode mp3 but not just to stream. It's been working perfectly until a few days ago. For online service, I'm on a college ethernet, so there should be no problem. My Pentium III 733 is on the same network running the stream, and it hasn't gone offline, so it's not a service provider problem. Anyways, someone was screwing with my webpage the first time the linux server box went offline; I got 300 hits in 30 seconds. The same IP was logged on two, three times simultaneously on my SHOUTcast, logged off, logged on, over and over every 30 seconds or so for maybe 20 minutes and then it crashed. Second time it crashed, no webpage attack but the same thing in shoutcast, and the same results. I banned him, and today it went down again. What do I do? Are people exploiting the protocol to wreak havoc?

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode

5th April 2001, 19:16	#1
00null00 Junior Member Join Date: Apr 2001 Posts: 4	Help me! I run a Linux box as a server, and for three days in a row now it's gotten completely offline unexpectedly. It's Redhat v7.0 with the latest version of SHOUTcast. It's a 486 with a 133 Pentium Overdrive chip and 16 megs of ram. I know that's very pitiful but remember, it's Linux, and it takes a lot of power to encode and decode mp3 but not just to stream. It's been working perfectly until a few days ago. For online service, I'm on a college ethernet, so there should be no problem. My Pentium III 733 is on the same network running the stream, and it hasn't gone offline, so it's not a service provider problem. Anyways, someone was screwing with my webpage the first time the linux server box went offline; I got 300 hits in 30 seconds. The same IP was logged on two, three times simultaneously on my SHOUTcast, logged off, logged on, over and over every 30 seconds or so for maybe 20 minutes and then it crashed. Second time it crashed, no webpage attack but the same thing in shoutcast, and the same results. I banned him, and today it went down again. What do I do? Are people exploiting the protocol to wreak havoc?