Calling Nerds And Geeks! Is This Hack?
#1
Need some computer experts to help me understand what this issue is.

I open my Gmail connected to the forum, and I find a zillion error messages from my hosting service.

Pretty weird.

Anyone know what's going on? Vbulletin error? Hacking attempt?

See attached screen shots.


Attached Files
.png   Screen Shot 2019-02-24 at 12.32.34 AM.png (Size: 575.47 KB / Downloads: 44)
.png   Screen Shot 2019-02-24 at 12.34.19 AM.png (Size: 178.85 KB / Downloads: 38)
:: 6.5 GRENDEL Deer and Targets :: 6mmARC Targets and Varmints and Deer :: 22 ARC Varmints and Targets

:: I Drank the Water :: Revelation 21:6 ::
Reply
#2
BFT,
Those could be actual errors. I’d have to know more about the forum database to know for sure though. First thing I’d do is see if those errors actually make any sense. I see some errors with a specific username. Does that username actually exist? What is the error reporting level set to for the database?
Engineer, FFL and Pastor
Reply
#3
The forums did crash yesterday. I tried to get on around that time and kept getting a 404 error, failure to connect to database. Looking at how those e-mails mention the same user name, maybe it was intentional?
Reply
#4
BFT,
Ok, now that I'm a bit more awake I have some more troubleshooting ideas. First determine if they are fake emails or if they are legitimately coming from your host/database.

If they are fake, then block them and move on.

If they are legitimate, then you need to find why they are being generated. It could be a database problem, a server problem, a network problem, a script problem, or a hack attempt.

Fake or Not:

Where are the links in the email actually pointing to? If you right click on one of the embedded links and select "copy link location", then paste that into a notepad text document, do the two links match? Are the links in the email actually pointing to your server?

Who are the emails really from? Sometimes looking at the details of an email will reveal that the sending address is being spoofed.

Does this forum actually use the version of MySQL that the emails state?

Try to verify if these error messages make sense for the structure and content of your database. Things such as usernames, table names and field values should match ones that you are using in your database.
Engineer, FFL and Pastor
Reply
#5
Thanks, guys, will check into your suggestions.
:: 6.5 GRENDEL Deer and Targets :: 6mmARC Targets and Varmints and Deer :: 22 ARC Varmints and Targets

:: I Drank the Water :: Revelation 21:6 ::
Reply
#6
ok, I’m at a Panera, couldn’t get thru at home. Not on laptop, 2 browsers, nor iPad. My phone I think got in but didn’t log in. Now at Panera and I can get in. Logged in. So here’s a possibility... either Verizon (my isp) or somehow someone has put a big block on the site? I don’t know who Panera’s isp is however. There has been some isps etc doing “blacklisting”... political style... don’t know for sure but look for some common thread in isp or web services, that’s my thought. Maybe google...

eta, old n rusty former IT and dB systems PM.
"Down the floor, out the door, Go Brandon Go!!!!!"
Reply
#7
O, I also did some pings and they all failed, but some servers you turn off the pings. But tracert got thru ok to the ip#.
"Down the floor, out the door, Go Brandon Go!!!!!"
Reply
#8
only able to see the site on my phone.
Reply
#9
Any update BFT?

Gray,
The site is working fine for me on all devices. The errors look like the SQL calls are failing. Like the PHP script is working, but that it can not connect to the MySQL database every time it tries to. This could be due to the SQL server having too many used connections or simply needing rebooted.

I had a similar problem with a site that I wrote and manage for a company. Basically the host was overselling their servers. Even though I didn't have a lot of traffic on my site, they were hosting other sites with too much total traffic for the servers to handle well.
Engineer, FFL and Pastor
Reply
#10
Well now we know who the nerds are Smile
Knowing everthing isnt as important as knowing where to find it.

Mark Twain

http://www.65grendel.com/forum/showthrea...-Whitetail
Reply
#11
[Image: ShrillAggravatingHoverfly-small.gif]
Engineer, FFL and Pastor
Reply
#12
It could be the SQL server has too many connections. That seems to be the gist of some messages.

And, yes, some wi-fi locales will block this website cuz it's firearms related. I've had that happen numerous times at restaurants or coffee shops.
:: 6.5 GRENDEL Deer and Targets :: 6mmARC Targets and Varmints and Deer :: 22 ARC Varmints and Targets

:: I Drank the Water :: Revelation 21:6 ::
Reply
#13
I would take the MySQL error at face value, your SQL server has gone away and your server was unable to process requests. Looks like MySQL came back.
Reply
#14
I'm assuming that it is a shared server. There are plans out there for dedicated servers or dedicated instances of MySQL, but they cost more. My guess is that it is not this site that is using all the resources. This is a popular forum, but I don't think there is THAT MUCH traffic on it. After all, this is a dying cartridge Rolleyes Wink

All joking aside, did the emails stop coming in? Your host may have been experiencing some difficulties that are now resolved, as rwh says.
Engineer, FFL and Pastor
Reply
#15
still blocked to me. exc for doing it bia my phone.
Reply
#16
update, i have a chat w verizon in progress. vzn has blocked this site due to tech issues.
Reply
#17
can someone find out from vzn on this? i'm in chat w them now.
Reply
#18
Grayfox, I’m on Verizon Wireless and I just connected to this forum with no issue. The tower/site is owned by Horvath communications but leased to Verizon Wireless.
Reply
#19
talked to vzn tech support. the signal gets thru their network but is filtered at the 65 site. vz says possible out of date bogon filter. they renewed my lease to new ip but no help, same thing. i can give that info to server tech spt if you want. problem now seems inside of the 65g web system.
Reply
#20
At least one forum member has sent me emails saying he can't log on, when he tries, it says the forum doesn't even exist.
NRA Basic, Pistol, Rifle, Shotgun, RSO

CCW, CQM, DM, Long Range Rifle Instructor

6.5 Grendel Reloading Handbooks & chamber brushes can be found here:

www.AR15buildbox.com
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)