hammered since yesterday

[Ickie]

sorry I am doing all I can.
we are having network issues as well as being hammered by ??
I may have to change our IP today.
I also may have to just suspend soh for a day

CPU=70.5%, [ksoftirqd/3]

In some situations IRQs come very very fast one after the other and the operating system cannot finish servicing one before another one arrives. This can happen when a high speed network card receives a very large number of packets in a short time frame.

Because the operating system cannot handle IRQs as they arrive (because they arrive too fast one after the other), the operating system queues them for later processing by a special internal process named ksoftirqd.

If ksoftirqd is taking more than a tiny percentage of CPU time, this indicates the machine is under heavy interrupt load.

[Allen]

Okay.......

[Dev One]

Rotten so & so's.......looks like if they can't enter one way, they'll try burrowing another...good luck Ickie, we know whats happening then if you go off air.
Keith

[Ickie]

now days with "its nobody's fault" and "free hot spots" to attack and the who gives a crap attitude most young people have, I am about to throw in the towel and call it quits come next year. than when all the free places go where the buffalo have gone, well us old ones will leave them nothing when we die.

[Rami]

Ickie,

It's not 99-99.5% of the public...it's only .5 - 1% of people who like to ruin the fun for everyone else. Look at a comments section a YouTube video sometime.

[stansdds]

I think Rami is spot on. The majority of people are not interesting in such exploits, it is the few who relish in making other people's lives miserable.

[Pat Pattle]

I don't pretend to know exactly the nature of what's been happening and it's a real shame you've had to go through all this Ickie.

I just wanted to say a big thank you for persevering and getting the site back and running. I'm sure there are many such as I for whom the world would be a less happier place without SoH and all the friends we have here.

Cheers!

Clive

[Mazo]

So glad to see SOH up and running again - missed being able to read the posts here.

Thanks for all your hard work to get back up and running. I have no use for anyone that writes malicious code or tries to take down a site for "fun"! They need their computers and fingers smashed with a hammer!!

Lyn

[Dangerousdave26]

Expect some outages today as we continue to work on the server.

[Ickie]

I have a kill all policy today, if I see loads exceed 4.0 I will turn off this forum, it is no use loosing data to a DDOS attack

[Ickie]

this just came in, here is a typical attack they run over and over until we shut down or run at a snail's pace

Time: Fri Feb 7 07:38:47 2014 -0500
IP: 217.169.223.79 (RS/Serbia/-)
Hits: 4
Blocked: Permanent Block

Sample of block hits:
Feb 7 07:38:42 ns1 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:24:e8:6b:c7:f8:00:17:df:59:3c:40:08:00 SRC=217.169.223.79 DST=72.233.76.234 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=3728 PROTO=TCP SPT=20842 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 Feb 7 07:38:42 ns1 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:24:e8:6b:c7:f8:00:17:df:59:3c:40:08:00 SRC=217.169.223.79 DST=72.233.76.235 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=3850 PROTO=TCP SPT=20842 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 Feb 7 07:38:42 ns1 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:24:e8:6b:c7:f8:00:17:df:59:3c:40:08:00 SRC=217.169.223.79 DST=72.233.76.238 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=53558 PROTO=TCP SPT=20842 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 Feb 7 07:38:42 ns1 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:24:e8:6b:c7:f8:00:17:df:59:3c:40:08:00 SRC=217.169.223.79 DST=72.233.76.237 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=39670 PROTO=TCP SPT=20842 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0

[KellyB]

Ickie: are they still originating from France? Or have they moved to another location?

Rest assured we all appreciate your vigilance and abilities to keep us going. Do what you need to; we'll try to be patient.

If only we could find the originator.....but I shouldn't say anymore out loud

[Maarten -]

Ickie: are they still originating from France? Or have they moved to another location?

Rest assured we all appreciate your vigilance and abilities to keep us going. Do what you need to; we'll try to be patient.

If only we could find the originator.....but I shouldn't say anymore out loud

Hear Hear!

[Sascha66]

Hear Hear!

Too bad we can't do anything to help - or can we?

[Ickie]

Ickie: are they still originating from France?

lol I am not suppose to say ...... it may hurt the French feelings