SDS

Look, I admit I'm not a sysadmin. I struggle doing this because every "." counts when setting this **** up. However, I begged my host to just stop incoming traffic to the ip address that was coming in - all of it. They made it sound like they were doing it for me. Rinse and repeat for 2 days. I finally said that I don't want to be associated with that ip address anymore and they finally responded with "Well, it's a part of your config - you would have to change that on your server". No ****. It's what I have been asking them to do for two days. I finally did it myself and things are back to normal (which I couldn't do yesterday because I had zero access). Was this solution so hard to think of and implement? Even a dimwit like me figured it out.

Fixed the time issue on the server. I think I fixed it in MySQL, but it still is off. Not sure what I need to do to correct it.

An issue that I am having right now is that I had to separate fixes going on in parallel. The problem is that both of them work. And now they are conflicting. Some people will see the new server for a short time.

I am not ready for this.

ugh. time thing is weird.

So, the Sabrespace IP address seemed to have been under two separate attacks. One was SYN flooding and the other was the standard DoS of sending in so many requests that the server would run out of memory. Every time we rebooted the server would become unresponsive in a minute or two. Host blocked traffic to IP address for me, but had some other issue that took into the morning to resolve on their hardware. The Tank knows no boundaries.

https://www.youtube.com/watch?v=wD7LNDLKfWY

Not sure what the difficulty was. Script execution was very high but load was low. Very odd.

So, this is the garbage being requested incessantly at Sabrespace (100x per second): 219.157.129.213 - - [09/Jan/2015:14:21:56 -0500] "\x16\x03" 501 283 "-" "-" 74.86.102.229 - - [09/Jan/2015:14:21:56 -0500] "GET /feed/rss/ HTTP/1.0" 404 290 "-" "MagpieRSS/0.61 (+http://magpierss.sf.net)" 118.78.218.110 - - [09/Jan/2015:14:21:56 -0500] "GET /announce?info_hash=%C0F%1C2%E7F%16%A9%C9%AAb%FDb%85%85%BC%ED%92%D1%BB&peer_id=%2DSD0100%2Dp%C1%F2I%02%A3%DB%0A%1A%1E%ABC&ip=118.78.218.110&port=17187&uploaded=91226112&downloaded=91226112&left=252983681&numwant=200&key=15333&compact=1 HTTP/1.0" 404 299 "-" "Bittorrent" 122.96.31.12 - - [09/Jan/2015:14:21:56 -0500] "\x16\x03\x01" 501 284 "-" "-" 61.158.152.181 - - [09/Jan/2015:14:21:56 -0500] "\x16\x03" 501 283 "-" "-" 61.158.152.130 - - [09/Jan/2015:14:21:56 -0500] "\x16\x03\x01" 501 284 "-" "-" 61.158.152.143 - - [09/Jan/2015:14:21:56 -0500] "\x16\x03" 501 283 "-" "-" 123.139.51.131 - - [09/Jan/2015:14:21:56 -0500] "\x16\x03" 501 283 "-" "-" 74.86.102.229 - - [09/Jan/2015:14:21:56 -0500] "GET /feed/rss/ HTTP/1.0" 404 290 "-" "MagpieRSS/0.61 (+http://magpierss.sf.net)" 36.32.31.183 - - [09/Jan/2015:14:21:56 -0500] "GET /announce?info_hash=yf%1E%CF%BC%AF%AD%89%CA%05%9F%D4%F5%1CM%40%C4%98%BAC&peer_id=%2DSD0100%2D%5E%B2%247%CB%26Z%06%100p%CB&ip=10.152.1.67&port=13125&uploaded=989714984&downloaded=989714984&left=198705152&numwant=200&key=30474&compact=1 HTTP/1.0" 404 297 "-" "Bittorrent" 42.236.201.231 - - [09/Jan/2015:14:21:56 -0500] "\x16\x03\x01" 501 284 "-" "-" 64.119.44.70 - - [09/Jan/2015:14:21:56 -0500] "\x16\x03\x01" 501 284 "-" "-" 211.97.128.175 - - [09/Jan/2015:14:21:56 -0500] "\x16\x03" 501 283 "-" "-" 75.126.61.62 - - [09/Jan/2015:14:21:56 -0500] "GET /announce?info_hash=%9D%A6%85%8BB%A0%E0%AEsi%FFL%B9g%A1%5D%0D%A5%8F%A8&peer_id=%2DSD0100%2D%99%C5%F0C%D6%0B%16%5E%82%A7%7B%DA&ip=60.168.44.150&port=23205&uploaded=0&downloaded=0&left=1146984599&numwant=200&key=13618&compact=1 HTTP/1.0" 404 297 "-" "Bittorrent" 123.131.41.84 - - [09/Jan/2015:14:21:56 -0500] "GET /announce?info_hash=Ym%86%C4%8F3%CE%18%B1%94%16%87%B6Q%E8%A0N%B4Xx&peer_id=%2DSD0100%2D%93%C8%ED%8DG%C1%09c%5DR%1A%80&ip=123.131.41.84&port=12104&uploaded=700448768&downloaded=700448768&left=0&numwant=200&key=10763&compact=1 HTTP/1.0" 404 299 "-" "Bittorrent" 157.122.178.252 - - [09/Jan/2015:14:21:56 -0500] "\x16\x03\x01" 501 284 "-" "-" 67.229.105.95 - - [09/Jan/2015:14:21:56 -0500] "\x16\x03\x01" 501 284 "-" "-" If anyone has any ideas - I'm all ears. and no, I don't have any of these files and I was not hacked.

ha. This was against SabreSpace, so... probably not.

There are links all over tbd and the forums here.

Boom there he is! I just kicked him off again. 9 warning points and multiple complaints about him via PM and the moderator tools.

The message board is fine, just the news portion is down.

Script execution time is under 0.3 seconds and load under 1. Hosting company said it was looked like I was under a DoS attack.

don't know if it was a hack or a corrupt database but the database process list was packed with processes from there. Took it offline.

Something is going on with the main SabreSpace site and was clogging up the pipes. Not sure what the issue is at the moment.

Don't listen to a thing The Dean wrote. All this cooking talk implies he pays his utility bills and therefore has a functional kitchen. Ain't no one believes that!

It was bold. I'll probably change it back at some point.

The red jacket doesn't fit that well.

I would appreciate serious posts only. Thank you.

I have had the same issue using that set up. It even happens on the default skin. I've searched for a fix but can't find one yet.

The one he drove into the ground and is now a shell of his former self?

Why did RG3 get injured?

[This is an automated response]<br /><br />As a courtesy to the other board members, please use more descriptive topic titles. A single name if far too vague to post as a title and provides little insight into what specifically the post is talking about.<br /><br />The topic starter can edit the topic title line to make it more appropriate.<br /><br />Thank you.

No. Snyder gave the reigns to Mikey. He made all the calls - including destroying the health of RG3 and keeping that clown Haslett. That was Mike's ship that ran into the iceberg.