If you use phpBB and have ver 2.10 or under UPGRADE immediately

[Red Spire Press]

I've been watching traffic on and off intermittently tonight and thought this looked a bit suspicious (the same IP accessing multiple points on the site at the same time):

Guest 22 Dec 2004 08:24 pm 22 Dec 2004 08:24 pm Story Hour 64.124.85.194

Guest 22 Dec 2004 08:24 pm 22 Dec 2004 08:24 pm Posting a message 64.124.85.194

Guest 22 Dec 2004 08:24 pm 22 Dec 2004 08:24 pm Posting a message 64.124.85.194

Guest 22 Dec 2004 08:24 pm 22 Dec 2004 08:24 pm Adventure Weekly 64.124.85.194

Guest 22 Dec 2004 08:20 pm 22 Dec 2004 08:24 pm Logging on 64.124.85.194

Guest 22 Dec 2004 08:21 pm 22 Dec 2004 08:23 pm Viewing member list 64.124.85.194

Guest 22 Dec 2004 08:23 pm 22 Dec 2004 08:23 pm Viewing Private Messages 64.124.85.194

Guest 22 Dec 2004 08:23 pm 22 Dec 2004 08:23 pm Viewing profile 64.124.85.194

Guest 22 Dec 2004 08:23 pm 22 Dec 2004 08:23 pm Viewing profile 64.124.85.194

Guest 22 Dec 2004 08:23 pm 22 Dec 2004 08:23 pm Viewing Private Messages 64.124.85.194

Guest 22 Dec 2004 08:23 pm 22 Dec 2004 08:23 pm Viewing profile 64.124.85.194

Guest 22 Dec 2004 08:23 pm 22 Dec 2004 08:23 pm Viewing profile 64.124.85.194

Guest 22 Dec 2004 08:22 pm 22 Dec 2004 08:22 pm Viewing Private Messages 64.124.85.194

Guest 22 Dec 2004 08:22 pm 22 Dec 2004 08:22 pm Viewing profile 64.124.85.194

Guest 22 Dec 2004 08:22 pm 22 Dec 2004 08:22 pm Searching forums 64.124.85.194

Guest 22 Dec 2004 08:22 pm 22 Dec 2004 08:22 pm Story Hour 64.124.85.194

Guest 22 Dec 2004 08:22 pm 22 Dec 2004 08:22 pm General Discussion 64.124.85.194

Guest 22 Dec 2004 08:22 pm 22 Dec 2004 08:22 pm Rules Discussion 64.124.85.194

Guest 22 Dec 2004 08:22 pm 22 Dec 2004 08:22 pm General Discussion 64.124.85.194

Guest 22 Dec 2004 08:22 pm 22 Dec 2004 08:22 pm Setting Discussion 64.124.85.194

Guest 22 Dec 2004 08:21 pm 22 Dec 2004 08:21 pm General Discussion 64.124.85.194

Guest 22 Dec 2004 08:21 pm 22 Dec 2004 08:21 pm General Discussion 64.124.85.194

Guest 22 Dec 2004 08:21 pm 22 Dec 2004 08:21 pm Adventure Weekly 64.124.85.194

Guest 22 Dec 2004 08:21 pm 22 Dec 2004 08:21 pm Adventure Weekly 64.124.85.194

Guest 22 Dec 2004 08:21 pm 22 Dec 2004 08:21 pm Adventure Weekly 64.124.85.194

 

[Kiln Publications]

something to do with the highlight code???

 

[TheAuldGrump]

You weren't the only I person that I know eho was hit - a friends board for his wargame also got wiped out. I posted a warning on the software forum.

The Auld Grump, hmmm, for once it wasn't Explorer...

 

[Red Spire Press]

Argh! Our forums keep getting hit. Not hacked, mind you, but flooded with too many connection requests that keep killing the database connection. I've contacted our providers in the meantime, but I've noticed a large range of IP addresses with suspicious behavior, so I'm not sure if any sort of ban control will do it.

 

[DMH]

I wonder if this is why I can't get to Goodman's forum. I get a 403, but that only started a couple days ago.

 

[Kiln Publications]

I bet that is why, they might be "rebooting"..... NOTE: I am still seeing massive residual hits toward my forum....

 

[Red Spire Press]

Yep, they seem to have dropped off a bit but I'm still getting garbage traffic from the worm. The previous database connection issues ended quickly so I'm keeping my fingers crossed.

 

[Kiln Publications]

I have noticed alot of extra bandwidth usage too, I am glad with lunarpages.com I have 4 GB a month....