SQL Injection mass attack

warbird · August 7th, 2008, 19:24

It just says symantec antivirus.

Trader rating · August 7th, 2008, 20:30

Not sure about that. We had an MSSQL box get owned last week, and a MySQL box in Maine as well. Both within a few hours of each other. So.....

warbird · August 7th, 2008, 20:42

This tells me nothing....lol

Lisa · August 7th, 2008, 21:15

I hate symantic, causes no ends of headaches...

mcguyver · August 9th, 2008, 01:07

I see this whenever I click on the "Currently Active Users" link at the bottom of the forum:

Fatal error: Allowed memory size of 8388608 bytes exhausted (tried to allocate 79 bytes) in /home/asc/public_html/includes/functions.php on line 888

Is this a sympton of the forum being attacked? Or some other problem?

eV.Viper · August 9th, 2008, 01:10

looks like php is getting piss with the ram lol

surebet · August 9th, 2008, 09:38

Little thought experiment here: what is the norm for unregistered users? Right now, day or night it hovers between 2.2k to 2.4k users. What would happen if for a few days we only allow acces to the registered folk?

eV.Viper · August 9th, 2008, 11:03

well, I'm sure the bandwidth usage will be the same (or a little bit less) and it's not really going to help us with the website.

We could still block total access to the forum unless they are registred, but they'll still be able visit most of the website's features. So it's not big deal!

Lisa · August 9th, 2008, 11:57

Quote:

Originally Posted by surebet

Little thought experiment here: what is the norm for unregistered users? Right now, day or night it hovers between 2.2k to 2.4k users. What would happen if for a few days we only allow acces to the registered folk?

Right now we've cut down on what an unregistered user can see, also the back end has had some improvements by Harley to optimize everything. If we cut off unregistered user it will do two things, reduce the number of people coming to the board and reduce the rankings on google.

Right now unregistered users can not see the off topic section, games and teams sections, the classifieds or the pit. I don't know how many of the unregistered users are bots (though i'm sure there's a way to find out, I'm just too lazy).

Mantelope · August 9th, 2008, 14:06

Quote:

Originally Posted by mcguyver

I see this whenever I click on the "Currently Active Users" link at the bottom of the forum:

Fatal error: Allowed memory size of 8388608 bytes exhausted (tried to allocate 79 bytes) in /home/asc/public_html/includes/functions.php on line 888

Is this a sympton of the forum being attacked? Or some other problem?

It's a symptom of a fresh Apache/PHP install; PHP's default memory limit is lower than it was previously. SHOULD be fixed, may require more tweaking in the future...

mcguyver · August 9th, 2008, 17:58

Go to www.jocairsoft.ca

I think they have an SQL problem.

Mantelope · August 9th, 2008, 18:22

Quote:

Originally Posted by mcguyver

Go to www.jocairsoft.ca

I think they have an SQL problem.

What makes you say that? I'm not seeing anything wrong with it.

Drache · August 9th, 2008, 18:25

this isnt whats causing all the "Database Errors" that some of the users are getting is it?

Mantelope · August 9th, 2008, 18:28

Quote:

Originally Posted by Drache

this isnt whats causing all the "Database Errors" that some of the users are getting is it?

No, this has to do with ASC being too big for its britches... We're going through some intensive optimization to fix it.

kalnaren · August 9th, 2008, 22:37

Quote:

Originally Posted by Tankdude

its ok, i got vista.

Quote:

Originally Posted by underground

I'm on a mac, I wonder if it affects us mac users...

Since when does client OS have anything to do with serverside vulnerabilities?

Home	Forums	Register	Gallery	FAQ	Calendar
Retailers	Community	News/Info	International Retailers	IRC	Today's Posts

British Columbia	Alberta
BCAC	EAR
Op-For	JOC
Northern Arms Airsoft	Skunkworx Airsoft
Airsoft Kelowna	RAAT
Prince George Airsoft	Manitoba
Saskatchewan	MAA
SK Airsoft	Ontario
PDW	Airsoft Ottawa
South Sask Mercs	Snow Dragons
Quebec	1st Ranger Platoon
PQAC	Wolfpack Tactical
1st Pathfinders Regiment	TTAC3
Quebec Airsoft
MTX Airsoft	Atlantic
FAQc	Atlantic Airsoft

August 7th, 2008, 21:15	#34
Lisa Looking for form T-whatev Trader rating Join Date: Jun 2004 Location: Trenton	I hate symantic, causes no ends of headaches... __________________ May you live in interesting times. ASCMART, your smart choice

August 9th, 2008, 01:07	#35
mcguyver Trader rating Join Date: Aug 2005 Location: Northern Alberta	I see this whenever I click on the "Currently Active Users" link at the bottom of the forum: Fatal error: Allowed memory size of 8388608 bytes exhausted (tried to allocate 79 bytes) in /home/asc/public_html/includes/functions.php on line 888 Is this a sympton of the forum being attacked? Or some other problem? __________________ Age verifier Northern Alberta Democracy is two wolves and a sheep discussing what's for dinner. Freedom is the wolves limping away while the sheep reloads. Never confuse freedom with democracy.

August 9th, 2008, 01:10	#36
eV.Viper Trader rating Join Date: Jun 2006 Location: Montreal, Quebec	looks like php is getting piss with the ram lol __________________ Aka Raptor TM M3 Shorty KJW Beretta M9

August 7th, 2008, 19:24	#31
warbird Trader rating Join Date: Oct 2006 Location: NB, Canada	It just says symantec antivirus.

August 7th, 2008, 20:30	#32
MadMorbius Guest Trader rating	Not sure about that. We had an MSSQL box get owned last week, and a MySQL box in Maine as well. Both within a few hours of each other. So.....

August 7th, 2008, 20:42	#33
warbird Trader rating Join Date: Oct 2006 Location: NB, Canada	This tells me nothing....lol

August 9th, 2008, 09:38	#37
surebet Vicious MSPaint Wizard Trader rating Join Date: Aug 2004 Location: Longueuil, Quebec	Little thought experiment here: what is the norm for unregistered users? Right now, day or night it hovers between 2.2k to 2.4k users. What would happen if for a few days we only allow acces to the registered folk? __________________ Annoyingly good with numbers Stop American Censorship

August 9th, 2008, 11:03	#38
eV.Viper Trader rating Join Date: Jun 2006 Location: Montreal, Quebec	well, I'm sure the bandwidth usage will be the same (or a little bit less) and it's not really going to help us with the website. We could still block total access to the forum unless they are registred, but they'll still be able visit most of the website's features. So it's not big deal! __________________ Aka Raptor TM M3 Shorty KJW Beretta M9

August 9th, 2008, 17:58	#41
mcguyver Trader rating Join Date: Aug 2005 Location: Northern Alberta	Go to www.jocairsoft.ca I think they have an SQL problem. __________________ Age verifier Northern Alberta Democracy is two wolves and a sheep discussing what's for dinner. Freedom is the wolves limping away while the sheep reloads. Never confuse freedom with democracy.

August 9th, 2008, 18:25	#43
Drache BALLET, TYPE: SELF LOATHING, ANALBURST Trader rating Join Date: Oct 2005	this isnt whats causing all the "Database Errors" that some of the users are getting is it?

SQL Injection mass attack

General