he's talking about minecraft-market, a donation carrier not mc-market
Minecraft Market is dead?
- Thread starter Stuarrt
- Start date
- Status
These are two different sites.
www.mc-market.org - Owned by Mick
www.minecraftmarket.com - Owned by some other guy
MC-Market is a forums.
MinecraftMarket.com is a donation carrier, similar to Buycraft.
Hey everybody, so yes we were attacked they did manage to get into the namecheap account which holds the domains and a few other areas as well.
They failed to get the source code or access to any of the servers though, they used a VPS/Dedi from Choopa and I contacted them to report the situation as well not for a fact it will do much good.
Right now I am simply waiting for access to my account on namecheap so I can return everything to normal.
I really do apologise for this, its my fault for this one and I do accept that.
Dec 1 01:58:35 minecraftmarket sshd[3450]: reverse mapping checking getaddrinfo for 66.55.150.181.choopa.net [66.55.150.181] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 1 01:58:35 minecraftmarket sshd[3450]: Connection closed by 66.55.150.181 [preauth]
Dec 1 01:58:38 minecraftmarket sshd[3452]: reverse mapping checking getaddrinfo for 66.55.150.181.choopa.net [66.55.150.181] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 1 01:58:39 minecraftmarket sshd[3452]: Connection closed by 66.55.150.181 [preauth]
Dec 1 01:58:41 minecraftmarket sshd[3456]: reverse mapping checking getaddrinfo for 66.55.150.181.choopa.net [66.55.150.181] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 1 01:58:44 minecraftmarket sshd[3456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.55.150.181 user=root
Dec 1 01:58:46 minecraftmarket sshd[3456]: Failed password for root from 66.55.150.181 port 65273 ssh2
Dec 1 01:58:47 minecraftmarket sshd[3456]: Connection closed by 66.55.150.181 [preauth]
The same happened on our other server as well and they failed once again.
They failed to get the source code or access to any of the servers though, they used a VPS/Dedi from Choopa and I contacted them to report the situation as well not for a fact it will do much good.
Right now I am simply waiting for access to my account on namecheap so I can return everything to normal.
I really do apologise for this, its my fault for this one and I do accept that.
Dec 1 01:58:35 minecraftmarket sshd[3450]: reverse mapping checking getaddrinfo for 66.55.150.181.choopa.net [66.55.150.181] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 1 01:58:35 minecraftmarket sshd[3450]: Connection closed by 66.55.150.181 [preauth]
Dec 1 01:58:38 minecraftmarket sshd[3452]: reverse mapping checking getaddrinfo for 66.55.150.181.choopa.net [66.55.150.181] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 1 01:58:39 minecraftmarket sshd[3452]: Connection closed by 66.55.150.181 [preauth]
Dec 1 01:58:41 minecraftmarket sshd[3456]: reverse mapping checking getaddrinfo for 66.55.150.181.choopa.net [66.55.150.181] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 1 01:58:44 minecraftmarket sshd[3456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.55.150.181 user=root
Dec 1 01:58:46 minecraftmarket sshd[3456]: Failed password for root from 66.55.150.181 port 65273 ssh2
Dec 1 01:58:47 minecraftmarket sshd[3456]: Connection closed by 66.55.150.181 [preauth]
The same happened on our other server as well and they failed once again.
Alrighty. Good to know that it should be fixed soon
Yeah it will be its just a matter of time, or more importantly Namecheap's support times... As for the twitter account I don't think I will get that back but I can accept that since the most important thing is they didn't get any client data or access to the source.Alrighty. Good to know that it should be fixed soon
Is there any sort of chance this may happen again? I was thinking about getting life time premium, but then this happened.
Not a chance, the only issue causing the downtime is because they gained access to the domain.
As for the servers and source code ect they couldn't access it.
We are far from dead and the attack was weak, no data was comprimised and neither was our source code, but if you think sending a few emails out to OUR clients means we are allowed to be attacked then your just as bad as any other no life.
Give it a some time and we will be back online, no data was lost.
Everything is fine its just the domains that are being a pain right now, none of the servers or source code were touched.
I didn't have it activated since I don't login to that account on a regular basis plus when I registered the domain they didn't have 2FA.
- Status
