Latest Posts:
flame12-22-2025 Gas price in your area (Rep.#7,378) from: GoFastRacerflameflame12-22-2025 Brrrr (Rep.#15,097) from: GoFastRacerflameflame12-22-2025 The Totally Useless Thread IV (Rep.#344) from: GoFastRacerflameflame12-22-2025 Three Word Post.....The Next Generation.... (Rep.#20,033) from: BigDogflameflame10-09-2025 Getting back into Ham Radio (Rep.#5) from: GoFastRacerflame
Home » HD Forums » Forums » Open Topic Forum » We're getting attacked!
No members are browsing this topic
Forum Led by: BigDog, RiverLiver
 

[ Track this topic :: Email this topic :: Print this topic ]
add a reply to this topic create a new topic create a new poll
Havasu DougMale Offline
Pisces
 HDF Gold Supporter
Delta Tau Chi - ΔTX
10,000 post flame1,000 post flame1,000 post flame100 post flame
North Padre Island, Texas
Posts: 12,193
APPD 1.45
Post Rank: 7
'78 Challenger jet
Post Icon Posted: Aug. 22 2005,6:52 pm Post # 1 see this member send this member a private message  quote this post in reply
We're getting attacked! :eek

The majority of the guests currently online are originating from the same IP address. :eek  

Just a warning that the board may go down temporarily. :eek

Quote
Search results for: 218.5.26.216


OrgName:    Asia Pacific Network Information Centre
OrgID:      APNIC
Address:    PO Box 2131
City:       Milton
StateProv:  QLD
PostalCode: 4064
Country:    AU

ReferralServer: whois://whois.apnic.net

NetRange:   218.0.0.0 - 218.255.255.255
CIDR:       218.0.0.0/8
NetName:    APNIC4
NetHandle:  NET-218-0-0-0-1
Parent:    
NetType:    Allocated to APNIC
NameServer: NS1.APNIC.NET
NameServer: NS3.APNIC.NET
NameServer: NS4.APNIC.NET
NameServer: NS-SEC.RIPE.NET
NameServer: TINNIE.ARIN.NET
Comment:    This IP address range is not registered in the ARIN database.
Comment:    For details, refer to the APNIC Whois Database via
Comment:    WHOIS.APNIC.NET or http://www.apnic.net/apnic-bin/whois2.pl
Comment:    ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment:    for the Asia Pacific region. APNIC does not operate networks
Comment:    using this IP address range and is not able to investigate
Comment:    spam or abuse reports relating to these addresses. For more
Comment:    help, refer to http://www.apnic.net/info/faq/abuse
Comment:    
RegDate:    2000-12-07
Updated:    2005-05-20

OrgTechHandle: AWC12-ARIN
OrgTechName:   APNIC Whois Contact
OrgTechPhone:  +61 7 3858 3100
OrgTechEmail:  search-apnic-not-arin@apnic.net





Back to top
website  | Member # 1 | Joined: 12-02-2002 |
AZKCMale Offline
Leo
 HDF Bronze Supporter
Jack of all trades. Master of none.
10,000 post flame5,000 post flame1,000 post flame100 post flame100 post flame100 post flame100 post flame
Tucson
Posts: 16,439
APPD 1.96
Post Rank: 5
1979 20ft Hawaiian Moonraker
Post Icon Posted: Aug. 22 2005,7:30 pm Post # 2 see this member send this member a private message  quote this post in reply
Holy Crap, bar the doors  :guns  :guns

God is Great, Beer is Good, and People are Crazy......

AUTO SAFETY HOUSE

Back to top
| Member # 29 | Joined: 12-18-2002 |
Havasu DougMale Offline
Pisces
 HDF Gold Supporter
Delta Tau Chi - ΔTX
10,000 post flame1,000 post flame1,000 post flame100 post flame
North Padre Island, Texas
Posts: 12,193
APPD 1.45
Post Rank: 7
'78 Challenger jet
Post Icon Posted: Aug. 22 2005,7:50 pm Post # 3 see this member send this member a private message  quote this post in reply
Quote (AZKC @ Aug. 22 2005,7:30 pm)
Holy Crap, bar the doors  :guns  :guns

I don't know what that was all about, but there were something like 30 guests coming from the same IP. :eek





Back to top
website  | Member # 1 | Joined: 12-02-2002 |
shuemanMale Offline
Libra
 HDF Gold Supporter
Born To Drive...
10,000 post flame5,000 post flame1,000 post flame1,000 post flame100 post flame100 post flame
Alta Loma CA
Posts: 17,228
APPD 2.15
Post Rank: 4
NADA
Post Icon Posted: Aug. 22 2005,7:52 pm Post # 4 see this member send this member a private message  quote this post in reply
FOCKERS...!!!   :flamed
Re-Direct 'em to HotBoat... :D
Back to top
| Member # 376 | Joined: 2-01-2004 |
LASINCMale Offline
Virgo
 HDF Supporter
HDF PW in training!
1,000 post flame1,000 post flame500 post flame100 post flame
Yorba Linda, CA
Posts: 2,636
APPD 0.35
Post Rank: 25
27' Advantage
Post Icon Posted: Aug. 22 2005,9:30 pm Post # 5 see this member send this member a private message  quote this post in reply
Don't really know what all the technical stuff means, but it's probably not a good thing.  :stupid
Back to top
| Member # 1456 | Joined: 5-24-2005 |
stingrayMale Offline
Aquarius
 HDF Silver Supporter
Troublemaker
1,000 post flame1,000 post flame1,000 post flame1,000 post flame100 post flame100 post flame
parker
Posts: 4,246
APPD 0.56
Post Rank: 17
Post Icon Posted: Aug. 22 2005,10:16 pm Post # 6 see this member send this member a private message  quote this post in reply
Quote (shueman @ Aug. 22 2005,7:52 pm)
FOCKERS...!!!   :flamed
Re-Direct 'em to HotBoat... :D

:angry maybe hotboat sent them :guns  :bebe

Back to top
| Member # 1275 | Joined: 4-03-2005 |
TuchopMale Offline
Gemini
 HDF Supporter
Simple Chimp
1,000 post flame100 post flame100 post flame100 post flame
520
Posts: 1,328
APPD 0.18
Post Rank: 37
Boatless
Post Icon Posted: Aug. 22 2005,10:48 pm Post # 7 see this member send this member a private message  quote this post in reply
Quote (Havasu Doug @ Aug. 22 2005,7:50 pm)
Quote (AZKC @ Aug. 22 2005,7:30 pm)
Holy Crap, bar the doors  :guns  :guns

I don't know what that was all about, but there were something like 30 guests coming from the same IP. :eek

How many guests can you have at one time? Or is just because of the same org IP?
Back to top
| Member # 1336 | Joined: 4-20-2005 |
Havasu DougMale Offline
Pisces
 HDF Gold Supporter
Delta Tau Chi - ΔTX
10,000 post flame1,000 post flame1,000 post flame100 post flame
North Padre Island, Texas
Posts: 12,193
APPD 1.45
Post Rank: 7
'78 Challenger jet
Post Icon Posted: Aug. 22 2005,11:13 pm Post # 8 see this member send this member a private message  quote this post in reply
Quote (Tuchop @ Aug. 22 2005,10:48 pm)
Quote (Havasu Doug @ Aug. 22 2005,7:50 pm)
Quote (AZKC @ Aug. 22 2005,7:30 pm)
Holy Crap, bar the doors  :guns  :guns

I don't know what that was all about, but there were something like 30 guests coming from the same IP. :eek

How many guests can you have at one time? Or is just because of the same org IP?

The first hint of trouble was when I saw a MySQL database error reporting "max_user_connections".  Our record users on the board is 90, but that is over a 30 minute period.  The error occurred today when around 30 connections were made in the same second. :eek  It doesn't matter if it's the same IP or not. Session ID's are issued by the board to each browser using the board.  You can have many computers on a network with the board only seeing one IP.  Also, session ID's are given to guests and members the same way.  It is just very unlikely that 30 different people would click a button at the exact same second.  I verified around 30 identical IP's hitting the board at the same time though today.  Does that make sense? :stupid  :D





Back to top
website  | Member # 1 | Joined: 12-02-2002 |
DANA DaveMale Offline
Taurus
 HDF Supporter
Pwc'er

Yorba Linda, CA
Posts: 65
APPD 0.01
Post Rank: 169
1994 Dana Arrow 19 w/ 454 Jet
Post Icon Posted: Aug. 23 2005,12:00 am Post # 9 see this member send this member a private message  quote this post in reply
Yeah sounds like a port scan program looking for any open ports on your server, it keeps pinging different ports at the same time looking any port that is vulnerable, then they can hack into the server through that port.  It happend to me on my web server, as i run an email server as well and they got through my firewall and started using my server to spam, i figured out what was going on after it was slowing down my bandwidth and sent out 15,000 emails in about 30 minutes.  Damn hackers!!!
Back to top
| Member # 1493 | Joined: 6-10-2005 |
Havasu DougMale Offline
Pisces
 HDF Gold Supporter
Delta Tau Chi - ΔTX
10,000 post flame1,000 post flame1,000 post flame100 post flame
North Padre Island, Texas
Posts: 12,193
APPD 1.45
Post Rank: 7
'78 Challenger jet
Post Icon Posted: Aug. 23 2005,12:20 am Post # 10 see this member send this member a private message  quote this post in reply
Quote (DANA Dave @ Aug. 23 2005,12:00 am)
Yeah sounds like a port scan program looking for any open ports on your server, it keeps pinging different ports at the same time looking any port that is vulnerable, then they can hack into the server through that port.  It happend to me on my web server, as i run an email server as well and they got through my firewall and started using my server to spam, i figured out what was going on after it was slowing down my bandwidth and sent out 15,000 emails in about 30 minutes.  Damn hackers!!!

Wow! :eek

We've been pretty lucky here I guess.  I've only seen today's problem happen once before in almost 3 years. :good  I banned an IP once before since it was hitting the board every 15 minutes for 2 weeks. :eek  Other than that, all I ever see is Google hitting it, but that's because I run Google ads and they don't hit it hard enough to disrupt the board. :good





Back to top
website  | Member # 1 | Joined: 12-02-2002 |
DANA DaveMale Offline
Taurus
 HDF Supporter
Pwc'er

Yorba Linda, CA
Posts: 65
APPD 0.01
Post Rank: 169
1994 Dana Arrow 19 w/ 454 Jet
Post Icon Posted: Aug. 23 2005,12:28 am Post # 11 see this member send this member a private message  quote this post in reply
Quote (Havasu Doug @ Aug. 23 2005,12:20 am)
Quote (DANA Dave @ Aug. 23 2005,12:00 am)
Yeah sounds like a port scan program looking for any open ports on your server, it keeps pinging different ports at the same time looking any port that is vulnerable, then they can hack into the server through that port.  It happend to me on my web server, as i run an email server as well and they got through my firewall and started using my server to spam, i figured out what was going on after it was slowing down my bandwidth and sent out 15,000 emails in about 30 minutes.  Damn hackers!!!

Wow! :eek

We've been pretty lucky here I guess.  I've only seen today's problem happen once before in almost 3 years. :good  I banned an IP once before since it was hitting the board every 15 minutes for 2 weeks. :eek  Other than that, all I ever see is Google hitting it, but that's because I run Google ads and they don't hit it hard enough to disrupt the board. :good

Yeah i wish i was that lucky..My server gets attacked about twice a week so i am always watching what my server is doing.  I host about 30 websites so i get alot of traffic comming through the system and i have the server at my house so it sucks having it on 24/7 with 8 cooling fans humming loudly...lol but i love IT stuff so it's worth it.
Back to top
| Member # 1493 | Joined: 6-10-2005 |
Havasu DougMale Offline
Pisces
 HDF Gold Supporter
Delta Tau Chi - ΔTX
10,000 post flame1,000 post flame1,000 post flame100 post flame
North Padre Island, Texas
Posts: 12,193
APPD 1.45
Post Rank: 7
'78 Challenger jet
Post Icon Posted: Aug. 23 2005,1:15 am Post # 12 see this member send this member a private message  quote this post in reply
Quote (DANA Dave @ Aug. 23 2005,12:28 am)
Quote (Havasu Doug @ Aug. 23 2005,12:20 am)
Quote (DANA Dave @ Aug. 23 2005,12:00 am)
Yeah sounds like a port scan program looking for any open ports on your server, it keeps pinging different ports at the same time looking any port that is vulnerable, then they can hack into the server through that port.  It happend to me on my web server, as i run an email server as well and they got through my firewall and started using my server to spam, i figured out what was going on after it was slowing down my bandwidth and sent out 15,000 emails in about 30 minutes.  Damn hackers!!!

Wow! :eek

We've been pretty lucky here I guess.  I've only seen today's problem happen once before in almost 3 years. :good  I banned an IP once before since it was hitting the board every 15 minutes for 2 weeks. :eek  Other than that, all I ever see is Google hitting it, but that's because I run Google ads and they don't hit it hard enough to disrupt the board. :good

Yeah i wish i was that lucky..My server gets attacked about twice a week so i am always watching what my server is doing.  I host about 30 websites so i get alot of traffic comming through the system and i have the server at my house so it sucks having it on 24/7 with 8 cooling fans humming loudly...lol but i love IT stuff so it's worth it.

Cool. :cool  I'm in training myself.  I started this place a few years ago, hacked the code a bit, then went back to school last year to learn more. :D





Back to top
website  | Member # 1 | Joined: 12-02-2002 |
TuchopMale Offline
Gemini
 HDF Supporter
Simple Chimp
1,000 post flame100 post flame100 post flame100 post flame
520
Posts: 1,328
APPD 0.18
Post Rank: 37
Boatless
Post Icon Posted: Aug. 23 2005,6:53 am Post # 13 see this member send this member a private message  quote this post in reply
Quote (Havasu Doug @ Aug. 23 2005,12:20 am)
Quote (DANA Dave @ Aug. 23 2005,12:00 am)
Yeah sounds like a port scan program looking for any open ports on your server, it keeps pinging different ports at the same time looking any port that is vulnerable, then they can hack into the server through that port.  It happend to me on my web server, as i run an email server as well and they got through my firewall and started using my server to spam, i figured out what was going on after it was slowing down my bandwidth and sent out 15,000 emails in about 30 minutes.  Damn hackers!!!

Wow! :eek

We've been pretty lucky here I guess.  I've only seen today's problem happen once before in almost 3 years. :good  I banned an IP once before since it was hitting the board every 15 minutes for 2 weeks. :eek  Other than that, all I ever see is Google hitting it, but that's because I run Google ads and they don't hit it hard enough to disrupt the board. :good

That sounds like somebody trying to take you out 30 same IP and in the same second. I use google to get in at work to avoid some filtering
Back to top
| Member # 1336 | Joined: 4-20-2005 |
familytiesMale Offline
Aries
Hot Boater
100 post flame100 post flame
Havasu Springs, AZ
Posts: 253
APPD 0.03
Post Rank: 91
Hallett 210
Post Icon Posted: Aug. 23 2005,5:52 pm Post # 14 see this member send this member a private message  quote this post in reply
Scary stuff,  lets nuke them :flamed

So Cal Old Crew

No trees were killed in the sending of this message.
However a large number of electrons were terribly inconvenienced.
Back to top
| Member # 1007 | Joined: 12-27-2004 |
13 replies since Aug. 22 2005,6:52 pm < Next Oldest | Next Newest >
 

[ Track this topic :: Email this topic :: Print this topic ]
add a reply to this topic create a new topic create a new poll

Home » HD Forums » Forums » Open Topic Forum » We're getting attacked!

navbarlogo
The Colorado River WebRing
‹ Prev | Hub | Like | Join | Surprise | Next ›

Please help keep HDF free. If you enjoy this site, feel free to make a donation to keep it running. THANKS!