Page 1 of 1

Forum availability

Posted: Wed May 07, 2025 8:20 pm
by Xan
Hi folks,

Sorry about the recent availability issues. It looks like we're receiving a DOS attack from Singapore, Russia, and Vietnam. I've blocked a bunch of IP addresses.

Re: Forum availability

Posted: Wed May 07, 2025 8:32 pm
by yankees60
Xan wrote: Wed May 07, 2025 8:20 pm Hi folks,

Sorry about the recent availability issues. It looks like we're receiving a DOS attack from Singapore, Russia, and Vietnam. I've blocked a bunch of IP addresses.
Thanks for defending us!

Re: Forum availability

Posted: Wed May 07, 2025 8:35 pm
by dualstow
I wonder what they want with a little forum.

Re: Forum availability

Posted: Wed May 07, 2025 8:38 pm
by Xan
Some men just want to watch the world burn.

Re: Forum availability

Posted: Wed May 07, 2025 9:38 pm
by yankees60
dualstow wrote: Wed May 07, 2025 8:35 pm I wonder what they want with a little forum.
It's not like if they establish a beachhead here that that allows them to conquer all the rest of the world's forums ...

Re: Forum availability

Posted: Thu May 08, 2025 5:22 am
by Mountaineer
Thanks for the update Xan, and for all you do to administer this forum.
Blessings.

Re: Forum availability

Posted: Thu May 08, 2025 12:04 pm
by dualstow
Xan wrote: Wed May 07, 2025 8:38 pm Some men just want to watch the world burn.
Felt like a quote, but I had to look it up. O0

Thank you, Xan, for your hard work and time put in.

Re: Forum availability

Posted: Fri May 09, 2025 12:44 pm
by Xan
There have been a lot of robotic user registrations lately. 497 of 3,352 total accounts were registered in the past week.

These accounts don't seem to be spamming the forum. The only effect seems to be that I'm getting a fair number of email bounces from registration confirmation emails.

The email addresses seem to often be in different countries from the IP addresses. My only guess at this point as to why somebody is doing this is to cause people to click Spam in order to keep the forum from being able to send email notifications to anybody. At least, that's the only effect I can see, so it's my guess as to the purpose. Why somebody would want to do that, I don't know.

I've switched from a simple "type the letters in this image" to reCaptcha on the registration page. Let's see if it helps.

Re: Forum availability

Posted: Fri May 09, 2025 2:08 pm
by Mountaineer
Xan wrote: Fri May 09, 2025 12:44 pm There have been a lot of robotic user registrations lately. 497 of 3,352 total accounts were registered in the past week.

These accounts don't seem to be spamming the forum. The only effect seems to be that I'm getting a fair number of email bounces from registration confirmation emails.

The email addresses seem to often be in different countries from the IP addresses. My only guess at this point as to why somebody is doing this is to cause people to click Spam in order to keep the forum from being able to send email notifications to anybody. At least, that's the only effect I can see, so it's my guess as to the purpose. Why somebody would want to do that, I don't know.

I've switched from a simple "type the letters in this image" to reCaptcha on the registration page. Let's see if it helps.
Perhaps it’s AI trying to learn all the wisdom presented by this outstanding group of gurus and wizards. 🤓🧙🤡

Re: Forum availability

Posted: Thu May 15, 2025 9:46 am
by Xan
Okay, I've determined that we've been under a distributed "Slow Loris" attack. Having deployed specific countermeasures to that, I should no longer need to be playing whack-a-mole with IP addresses.

No idea why anybody would want to shut down this forum, though.

Re: Forum availability

Posted: Thu May 15, 2025 9:54 am
by Smith1776
Xan wrote: Thu May 15, 2025 9:46 am Okay, I've determined that we've been under a distributed "Slow Loris" attack. Having deployed specific countermeasures to that, I should no longer need to be playing whack-a-mole with IP addresses.

No idea why anybody would want to shut down this forum, though.
My money is on a salty bogleheads forum member that doesn’t like us.

I can think of a few.

Re: Forum availability

Posted: Thu May 15, 2025 9:58 am
by Mountaineer
Xan wrote: Thu May 15, 2025 9:46 am Okay, I've determined that we've been under a distributed "Slow Loris" attack. Having deployed specific countermeasures to that, I should no longer need to be playing whack-a-mole with IP addresses.

No idea why anybody would want to shut down this forum, though.
Wow! Thanks again Xan for all you do. I'd never heard of that "Slow Loris" attack. The nefarious do-badders are certainly crafty beasts.

Re: Forum availability

Posted: Thu May 15, 2025 1:11 pm
by dualstow

Re: Forum availability

Posted: Sat May 17, 2025 2:48 pm
by Vil
Last year, as we went live with a project in Germany, all attacks came from Russia.
Off:
Just 6 months before the suggested date of Bulgaria joining the EURO area, our president decided its good to have a referendum against accepting the EUR currency, nice, ah. Russian hands are long, very long.
Yet another recent case, you might not be aware of, but widely proclaimed : Six Bulgarians jailed after spying for Russia in UK.

Re: Forum availability

Posted: Sat May 17, 2025 7:50 pm
by boglerdude
botnets practicing and probing. The only evil genius that thinks about this forum is vinny

Re: Forum availability

Posted: Sun May 18, 2025 7:25 am
by dualstow
Vil wrote: Sat May 17, 2025 2:48 pm Last year, as we went live with a project in Germany, all attacks came from Russia.
Off:
Just 6 months before the suggested date of Bulgaria joining the EURO area, our president decided its good to have a referendum against accepting the EUR currency, nice, ah. Russian hands are long, very long.
Yet another recent case, you might not be aware of, but widely proclaimed : Six Bulgarians jailed after spying for Russia in UK.
I heard about the spy case, but forgot they were Bulgarian.