Slow Forums: PF Under DDOS Attack

[lisab]

I just got several "Page Not Found" errors. Seems like an intermittent issue, though.

Edit - More specifically:

This webpage is not available
The webpage at https://www.physicsforums.com/ might be temporarily down or it may have moved permanently to a new web address.
Error 324 (net::ERR_EMPTY_RESPONSE): Unknown error.

Btw, I use Chrome.

 

[Char. Limit]

I just got several "Page Not Found" errors. Seems like an intermittent issue, though.

Edit - More specifically:

This webpage is not available
The webpage at https://www.physicsforums.com/ might be temporarily down or it may have moved permanently to a new web address.
Error 324 (net::ERR_EMPTY_RESPONSE): Unknown error.

Btw, I use Chrome.

You should try the Firefox 5 Beta!

 

[JaredJames]

You should try the Firefox 5 Beta!

Firefox 4 isn't running properly for me at the moment, would hate to think what that's like.

 

[Char. Limit]

Firefox 4 isn't running properly for me at the moment, would hate to think what that's like.

I haven't had a crash yet.

 

[JaredJames]

I haven't had a crash yet.

Feel free to have one of mine.

Flash happens to be the worst offender.

 

[dlgoff]

Firefox 4 isn't running properly for me at the moment, would hate to think what that's like.

Oh man. I'm using version 3.6.16 and know they will not continue to support it forever. I've got the Firefox 4 install page bookmarked for when the time comes. But now you've got me worried.

 

[JaredJames]

Oh man. I'm using version 3.6.16 and know they will not continue to support it forever. I've got the Firefox 4 install page bookmarked for when the time comes. But now you've got me worried.

I'm running Ubuntu (Linux) 64-bit and it's not an easy install job - or at least it wasn't when I did it on the day it came out.

Windows should be fine.

Additional: Over the last hour or so, whenever I click buttons such as Quote or Reply (or any link on the forum) it tries to get me to download the page I'm supposed to go to.

 

[DaveC426913]

Additional: Over the last hour or so, whenever I click buttons such as Quote or Reply (or any link on the forum) it tries to get me to download the page I'm supposed to go to.

[ tone = frosty/b*tchy ]
You have no one to blame but yourself for installing software that's buggy. Suck it up buttercup.
[ /tone ]

 

[JaredJames]

[ tone = frosty/b*tchy ]
You have no one to blame but yourself for installing software that's buggy. Suck it up buttercup.
[ /tone ]

Think I just got owned.

(Although I do agree with you, I just installed Firefox 4 and it's playing up rather badly. My own fault.)

 

[turbo]

Periodic problems this afternoon:

No data received
Unable to load the webpage because the server sent no data.
Here are some suggestions:
Reload this web page later.
Error 324 (net::ERR_EMPTY_RESPONSE): The server closed the connection without sending any data.

 

[Evo]

I've been getting sporadic "page not found" since 4pm.

 

[Greg Bernhardt]

I have been getting those errors lately too. Investigating.

 

[JaredJames]

I've been getting sporadic "page not found" since 4pm.

Ditto, started happening now.

And it's now constantly asking me to download pages instead of opening them.

 

[jhae2.718]

I just got one of the download page requests.

Using Firefox 4 on OpenSUSE 11.4 x86_64 (Linux).

 

[Borek]

502 Bad Gateway again, 13 minutes ago.

 

[dlgoff]

I don't know how these things work, but I got another AVAST threat blocked message while visiting the Scepticism & Debunking forum around 3:30pm CDT. The pop-up mentioned a DCOM exploit with a link for more information. But that link only had information about AVAST, not the threat.

 

[lisab]

I don't know how these things work, but I got another AVAST threat blocked message while visiting the Scepticism & Debunking forum around 3:30pm CDT. The pop-up mentioned a DCOM exploit with a link for more information. But that link only had information about AVAST, not the threat.

Yeah, there's been a poltergeist hanging around in that forum for a while now.

 

[Borek]

I don't know how these things work, but I got another AVAST threat blocked message while visiting the Scepticism & Debunking forum around 3:30pm CDT. The pop-up mentioned a DCOM exploit with a link for more information. But that link only had information about AVAST, not the threat.

From what I understand it is probably a coincidence - that is, attack didn't came from PF, but from completely different place, it just happened at the moment you were visiting S&D.

Was there any information about IP from which the attack came? If there is such information, compare it the to physicsforums.com IP which is 74.86.200.109.

 

[dlgoff]

From what I understand it is probably a coincidence - that is, attack didn't came from PF, but from completely different place, it just happened at the moment you were visiting S&D.

Was there any information about IP from which the attack came? If there is such information, compare it the to physicsforums.com IP which is 74.86.200.109.

Thanks Borek. I will set my pop-up AVAST messages to stay longer so next time I can get the IP if it's available.

 

[Borek]

502 again, second time today, just a minute ago.

First time it was much earlier, about 8:40 am my time (now is 11:16 am).

 

[Studiot]

Borek, as a matter of interest do you use the free or pro version of Avast and do you use the sandbox?
You seem to get more trouble than most with Avast.

 

[Borek]

Borek, as a matter of interest do you use the free or pro version of Avast and do you use the sandbox?
You seem to get more trouble than most with Avast.

Do I? I don't recall stating I have serious problems with Avast. For most of the time it works OK, it failed once, and from what I was able to google it didn't failed just me, more people reported exactly the same problem with exactly the same virus. Free version on Marzena's computer, no idea what she did.

 

[Borek]

502 again, second time today, just a minute ago.

First time it was much earlier, about 8:40 am my time (now is 11:16 am).

Minute after I posted forum died for me, I was not able to edit the post (and I already forgot why I wanted).

 

[Redbelly98]

For what it's worth, I have not noticed any problems with PF for several weeks now.

 

[OmCheeto]

For what it's worth, I have not noticed any problems with PF for several weeks now.

Me too.

 

[dlgoff]

Was there any information about IP from which the attack came? If there is such information, compare it the to physicsforums.com IP which is 74.86.200.109.

Thanks Borek. I will set my pop-up AVAST messages to stay longer so next time I can get the IP if it's available.

It happened again and I got the IP. It wasn't Physicsforums.coms IP but I only get this alert while lurking here. Anyway, I attacked the pop-up info.

 

[fluidistic]

Wow. PF hasn't been so fast since the attacks for me. Incredibly "fluid" now. A very good news for me. I was getting really annoyed to wait minutes and opening more than 10 pages for at least 1 to load.
Now all seems perfect! Good job guys.

 

[Studiot]

RE: Dlgoff/Avast picture

Yes I had a bunch of these yesterday.

A word of warning, the calling code remains in your internet cache until you clear this so this will keep popping up as you change web pages - it will also affect other sites and may (probably) not have come from PF. Mine started on Ebay.

So if you see this clear your internet cache.

 

[dlgoff]

RE: Dlgoff/Avast picture

Yes I had a bunch of these yesterday.

A word of warning, the calling code remains in your internet cache until you clear this so this will keep popping up as you change web pages - it will also affect other sites and may (probably) not have come from PF. Mine started on Ebay.

So if you see this clear your internet cache.

I use Firefox and clear the cache manually before entering PF. The browser is also set to clear everything on exit. So that's not the problem here.

 

[Borek]

Sadly I am sure now my problems are not related directly to PF server, but to something on the route between server and me. At the moment I am using a proxy, as otherwise I am not able to neither read nor post.

borek@invincible ~ $ ./checkPF
PING physicsforums.com (74.86.200.109) 56(84) bytes of data.

--- physicsforums.com ping statistics ---
10 packets transmitted, 0 received, 100% packet loss, time 8998ms

traceroute to physicsforums.com (74.86.200.109), 15 hops max, 40 byte packets
 1  192.168.0.7 (192.168.0.7)  0.589 ms  0.588 ms  0.550 ms
 2  10.0.0.138 (10.0.0.138)  0.994 ms  1.008 ms  0.959 ms
 3  * * *
 4  xxxxxx.tpnet.pl (80.xxx.xxx.xxx)  24.153 ms  165.036 ms  24.492 ms
 5  hbg-b2-link.telia.net (213.248.89.93)  40.131 ms  40.774 ms  42.829 ms
 6  hbg-bb1-link.telia.net (80.91.251.77)  39.855 ms  40.643 ms  40.277 ms
 7  nyk-bb1-link.telia.net (80.91.247.129)  123.609 ms  125.113 ms nyk-bb1-link.telia.net (80.91.247.127)  124.372 ms
 8  dls-bb1-link.telia.net (213.155.130.207)  165.240 ms  165.234 ms  164.837 ms
 9  te3-3.bbr02.eq01.dal01.networklayer.com (213.248.102.174)  164.725 ms  195.295 ms  165.761 ms
10  po6.dar02.sr01.dal01.networklayer.com (173.192.18.213)  165.601 ms  166.956 ms  166.006 ms
11  po2.fcr03.sr04.dal01.networklayer.com (66.228.118.190)  165.963 ms  166.384 ms  166.775 ms
12  * * *
13  * * *
14  * * *
15  * * *