Slow Forums: PF Under DDOS Attack

  • Thread starter Thread starter Borek
  • Start date Start date
  • #121


This is a test, let's see how it goes

edit: Not greased lightning, but MUCH better, maybe even back to normal.

edit 2: MUCH faster, but I think you're still losing some packets.
 
Physics news on Phys.org
  • #122


It's a lot better for me! Although the forum doesn't load in about 5% of the times. But the speed is almost back to normal!
 
  • #123


micromass said:
It's a lot better for me! Although the forum doesn't load in about 5% of the times. But the speed is almost back to normal!

OK, definitely just packet-loss then.
 
  • #124


Meanwhile, it slowed down considerably again at the moment
 
  • #125


Yes, it's going in waves. 15 minutes ago it was very fast. Now it goes slow again...
 
  • #126


Andre said:
Meanwhile, it slowed down considerably again at the moment

It's fast, you just need to click a few times if it's slow the first couple of times. Packet loss = even if the overall speed is good, sometimes your "signals" are not getting through; they're being dropped.
 
  • #127


the attack is still going strong. we have a couple more tricks up our sleeves, but the site won't be optimal until it stops completely.
 
Last edited:
  • #128
It's still very slow for me and pages sometimes fail to open - 7:30am PDT.
 
  • #129


Greg Bernhardt said:
the attack is still going strong. we have a couple more tricks up our sleeves, but the site won't be optimal until it stops completely.

If you've isolated even a few IPs that are part of a botnet... maybe you could post them here... not so that anyone would do anything active. Rather, we could configure our own firewalls to reject packets from that source, and then, if someone used that information unscrupulously... it's not on you.

"La shaiq' waqee mutlak bl kollin moumkin"(AC)
 
  • #130


nismaratwork said:
If you've isolated even a few IPs that are part of a botnet... maybe you could post them here... not so that anyone would do anything active. Rather, we could configure our own firewalls to reject packets from that source, and then, if someone used that information unscrupulously... it's not on you.

"La shaiq' waqee mutlak bl kollin moumkin"(AC)

They are spoofing thousands
 
  • #131
We have just made another adjustment, please relay your experiences.
 
  • #132
PF is very responsive right now.
 
  • #133
I'm having no trouble right now.
 
  • #134
Definitely a lot better in the last few minutes. Feels like it's back to normal for me now.
 
  • #135
PF is very quick at the moment. Whatever you did, keep it up!
 
  • #136
It's working very well now as opposed to about an hour ago.
 
  • #137


Greg Bernhardt said:
They are spoofing thousands

Of course they are, but in theory only one or two are needed for... um... "reasonable self defense".


Anyway, PF is now smooth as butter.
 
  • #138
Seems to be running normally for me for the first time since saturday!
 
  • #139
"Here we are again, happy as can be. All good friends in good company..." :wink:
 
  • #140
Thank you Greg for all of your hard work!
 
  • #141
Good here, so far!
 
  • #142
Evo said:
Thank you Greg for all of your hard work!

Yes indeed! Thanks Greg!
 
  • #143
If there's a more thankless job than spending your weekend, trapped by an idioit FedEx guy, fighting with (probably) one punk script-kiddy attacking a genuinely helpful site... I don't know what is.

Thanks Greg... have you gotten ANY sleep?
 
  • #144
DDOS on PF..? Who would do such an inane thing ?

OTOH, it's a relief to know that's what causing it, I thought it was something I said..
 
  • #145
Smooooth as a smoooothie! :!)

Thanks Greg!

Code: 
[SIZE="1"]============================================================================================
C:\Windows\system32>tracert physicsforums.com

Tracing route to physicsforums.com [74.86.200.109]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  192.168.1.1
  2    51 ms    47 ms    42 ms  xxxxxxxxx.tbcn.telia.com [xxx.xxx.xxx.xxx]
  3    30 ms    31 ms    31 ms  s-b1-link.telia.net [80.91.246.230]
  4    30 ms    30 ms    30 ms  s-bb2-link.telia.net [80.91.254.110]
  5    42 ms    41 ms    42 ms  kbn-bb2-link.telia.net [213.248.65.166]
  6   126 ms   127 ms   126 ms  nyk-bb2-link.telia.net [80.91.254.91]
  7   182 ms   182 ms   190 ms  dls-bb1-link.telia.net [213.155.130.67]
  8   179 ms   180 ms   181 ms  te3-3.bbr02.eq01.dal01.networklayer.com [213.248.102.174]
  9     *      178 ms   178 ms  po6.dar02.sr01.dal01.networklayer.com [173.192.18.213]
 10     *        *        *     Request timed out.
 11     *        *        *     Request timed out.
 12     *        *        *     Request timed out.
 13     *        *        *     Request timed out.
 14     *        *        *     Request timed out.
 15     *        *        *     Request timed out.
 16     *        *        *     Request timed out.
 17     *        *        *     Request timed out.
 18     *        *        *     Request timed out.
 19     *        *        *     Request timed out.
 20     *        *        *     Request timed out.
 21     *        *        *     Request timed out.
 22     *        *        *     Request timed out.
 23     *        *        *     Request timed out.
 24     *        *        *     Request timed out.
 25     *        *        *     Request timed out.
 26     *        *        *     Request timed out.
 27     *        *        *     Request timed out.
 28     *        *        *     Request timed out.
 29     *        *        *     Request timed out.
 30     *        *        *     Request timed out.

Trace complete.

C:\Windows\system32>time
The current time is: 16:22:45,29



============================================================================================
C:\Windows\system32>tracert physicsforums.com

Tracing route to physicsforums.com [74.86.200.109]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  192.168.1.1
  2    26 ms    26 ms    26 ms  xxxxxxxxx.tbcn.telia.com [xxx.xxx.xxx.xxx]
  3    30 ms    30 ms    31 ms  s-b1-link.telia.net [80.91.246.230]
  4    31 ms    31 ms    31 ms  s-bb2-link.telia.net [80.91.246.150]
  5    39 ms    39 ms    39 ms  kbn-bb2-link.telia.net [80.91.246.109]
  6   341 ms   176 ms   124 ms  nyk-bb2-link.telia.net [80.91.247.119]
  7   173 ms   173 ms   231 ms  dls-bb1-link.telia.net [213.155.130.65]
  8   170 ms   170 ms   170 ms  te3-3.bbr02.eq01.dal01.networklayer.com [213.248.102.174]
  9   172 ms   172 ms   172 ms  po6.dar02.sr01.dal01.networklayer.com [173.192.18.213]
 10   376 ms   200 ms   180 ms  po2.fcr03.sr04.dal01.networklayer.com [66.228.118.190]
 11   172 ms   179 ms   171 ms  physicsforums.com [74.86.200.109]

Trace complete.

C:\Windows\system32>time
The current time is: 17:38:59,54



============================================================================================
C:\Windows\system32>tracert physicsforums.com

Tracing route to physicsforums.com [74.86.200.109]
over a maximum of 30 hops:

  1     2 ms    <1 ms    <1 ms  192.168.1.1
  2    26 ms    26 ms    26 ms  xxxxxxxxx.tbcn.telia.com [xxx.xxx.xxx.xxx]
  3    31 ms    31 ms    40 ms  s-b1-link.telia.net [80.91.246.230]
  4    31 ms    31 ms    31 ms  s-bb2-link.telia.net [80.91.246.150]
  5    46 ms    39 ms    39 ms  kbn-bb2-link.telia.net [80.91.246.109]
  6   124 ms   123 ms   123 ms  nyk-bb2-link.telia.net [80.91.247.119]
  7   168 ms   168 ms   168 ms  dls-bb1-link.telia.net [213.155.130.67]
  8   164 ms   164 ms   164 ms  te3-3.bbr02.eq01.dal01.networklayer.com [213.248.102.174]
  9   166 ms   166 ms   166 ms  po6.dar02.sr01.dal01.networklayer.com [173.192.18.213]
 10   171 ms   172 ms   171 ms  po2.fcr03.sr04.dal01.networklayer.com [66.228.118.190]
 11   178 ms   171 ms   172 ms  physicsforums.com [74.86.200.109]

Trace complete.

C:\Windows\system32>time
The current time is: 17:57:13,80


============================================================================================


It was tight at SoftLayer Technologies 66.228.118.190, right...?
 
  • #146
I am having no problems posting or accessing the boards.

Thank you for all of your hard work! I think I can safely speak for everyone when I say, "We appreciate it tremendously!"
 
  • #147
ladykrimson said:
I think I can safely speak for everyone when I say, "We appreciate it tremendously!"

Yup, count me in!

... I’ve never been suicidal before ... but this was close ... PHEW! (:smile:)
 
  • #148
It's working now!

Who would want to DDOS us? We're so nice!
 
  • #149
Looks good right now. Thanks Greg! :smile:
 
  • #150
Group hug on Greg!
 

Similar threads

PF Slow Again - Possible DDoS Attack?
  • · Replies 4 ·
Replies
4
Views
2K
Bug Slow Forum Apr 8: Limited Access, JS Error
  • · Replies 7 ·
Replies
7
Views
2K
Chemical Forums down, or how I learned what slowloris is
  • · Replies 8 ·
Replies
8
Views
1K
Complaint Possible Causes of Slow Response from PF and Solutions for Users and Staff
  • · Replies 22 ·
Replies
22
Views
5K
  • Sticky
Announcement Easy ways you can support Physics Forums
  • · Replies 97 ·
4
Replies
97
Views
50K
JavaScript PF Alert Machine: Can I Monitor Forum Alerts Without Logging In?
  • · Replies 3 ·
Replies
3
Views
1K
Could we make a practical solar fridge?
  • · Replies 30 ·
2
Replies
30
Views
4K
ABC reference frame synchronous generator modelling in Ltspice
  • · Replies 1 ·
Replies
1
Views
3K
11 reasons why you should be a Gold Member
  • · Replies 13 ·
Replies
13
Views
3K
Undergrad Lorentz Transformation: Premises + Derivation
  • · Replies 5 ·
Replies
5
Views
2K