Slow Forums: PF Under DDOS Attack

  • Thread starter Thread starter Borek
  • Start date Start date
AI Thread Summary
Physics Forums is currently experiencing significant slowdowns and connectivity issues due to a DDoS attack that began earlier in the day. Users are reporting long page load times, errors related to MySQL, and intermittent access to the site and chat features. The forum's team is actively working with their data center to mitigate the attack, but performance may remain inconsistent as the firewall catches up. Discussions among users speculate on the motivations behind the attack, expressing frustration and confusion over why such a community would be targeted. Overall, while some users report improvements, many still face challenges with site functionality.
  • #301
I just got several "Page Not Found" errors. Seems like an intermittent issue, though.

Edit - More specifically:

This webpage is not available
The webpage at https://www.physicsforums.com/ might be temporarily down or it may have moved permanently to a new web address.
Error 324 (net::ERR_EMPTY_RESPONSE): Unknown error.

Btw, I use Chrome.
 
Physics news on Phys.org
  • #302
lisab said:
I just got several "Page Not Found" errors. Seems like an intermittent issue, though.

Edit - More specifically:

This webpage is not available
The webpage at https://www.physicsforums.com/ might be temporarily down or it may have moved permanently to a new web address.
Error 324 (net::ERR_EMPTY_RESPONSE): Unknown error.

Btw, I use Chrome.

You should try the Firefox 5 Beta!
 
  • #303
Char. Limit said:
You should try the Firefox 5 Beta!

Firefox 4 isn't running properly for me at the moment, would hate to think what that's like.
 
  • #304
jarednjames said:
Firefox 4 isn't running properly for me at the moment, would hate to think what that's like.

I haven't had a crash yet.
 
  • #305
Char. Limit said:
I haven't had a crash yet.

Feel free to have one of mine.

Flash happens to be the worst offender.
 
  • #306
jarednjames said:
Firefox 4 isn't running properly for me at the moment, would hate to think what that's like.

Oh man. I'm using version 3.6.16 and know they will not continue to support it forever. I've got the Firefox 4 install page bookmarked for when the time comes. But now you've got me worried.
 
  • #307
dlgoff said:
Oh man. I'm using version 3.6.16 and know they will not continue to support it forever. I've got the Firefox 4 install page bookmarked for when the time comes. But now you've got me worried.

I'm running Ubuntu (Linux) 64-bit and it's not an easy install job - or at least it wasn't when I did it on the day it came out.

Windows should be fine.

Additional: Over the last hour or so, whenever I click buttons such as Quote or Reply (or any link on the forum) it tries to get me to download the page I'm supposed to go to.
 
  • #308
jarednjames said:
Additional: Over the last hour or so, whenever I click buttons such as Quote or Reply (or any link on the forum) it tries to get me to download the page I'm supposed to go to.

[ tone = frosty/b*tchy ]
You have no one to blame but yourself for installing software that's buggy. Suck it up buttercup.
[ /tone ]
:biggrin::biggrin:
 
  • #309
DaveC426913 said:
[ tone = frosty/b*tchy ]
You have no one to blame but yourself for installing software that's buggy. Suck it up buttercup.
[ /tone ]
:biggrin::biggrin:

Think I just got owned.

(Although I do agree with you, I just installed Firefox 4 and it's playing up rather badly. My own fault.)
 
  • #310
Periodic problems this afternoon:

No data received
Unable to load the webpage because the server sent no data.
Here are some suggestions:
Reload this web page later.
Error 324 (net::ERR_EMPTY_RESPONSE): The server closed the connection without sending any data.
 
  • #311
I've been getting sporadic "page not found" since 4pm.
 
  • #312
I have been getting those errors lately too. Investigating.
 
  • #313
Evo said:
I've been getting sporadic "page not found" since 4pm.

Ditto, started happening now.

And it's now constantly asking me to download pages instead of opening them.
 
  • #314
I just got one of the download page requests.

Using Firefox 4 on OpenSUSE 11.4 x86_64 (Linux).
 
Last edited:
  • #315
502 Bad Gateway again, 13 minutes ago.
 
  • #316
I don't know how these things work, but I got another AVAST threat blocked message while visiting the Scepticism & Debunking forum around 3:30pm CDT. The pop-up mentioned a DCOM exploit with a link for more information. But that link only had information about AVAST, not the threat.
 
  • #317
dlgoff said:
I don't know how these things work, but I got another AVAST threat blocked message while visiting the Scepticism & Debunking forum around 3:30pm CDT. The pop-up mentioned a DCOM exploit with a link for more information. But that link only had information about AVAST, not the threat.

Yeah, there's been a poltergeist hanging around in that forum for a while now.
 
  • #318
dlgoff said:
I don't know how these things work, but I got another AVAST threat blocked message while visiting the Scepticism & Debunking forum around 3:30pm CDT. The pop-up mentioned a DCOM exploit with a link for more information. But that link only had information about AVAST, not the threat.

From what I understand it is probably a coincidence - that is, attack didn't came from PF, but from completely different place, it just happened at the moment you were visiting S&D.

Was there any information about IP from which the attack came? If there is such information, compare it the to physicsforums.com IP which is 74.86.200.109.
 
  • #319
Borek said:
From what I understand it is probably a coincidence - that is, attack didn't came from PF, but from completely different place, it just happened at the moment you were visiting S&D.

Was there any information about IP from which the attack came? If there is such information, compare it the to physicsforums.com IP which is 74.86.200.109.

Thanks Borek. I will set my pop-up AVAST messages to stay longer so next time I can get the IP if it's available.
 
  • #320
502 again, second time today, just a minute ago.

First time it was much earlier, about 8:40 am my time (now is 11:16 am).
 
  • #321
Borek, as a matter of interest do you use the free or pro version of Avast and do you use the sandbox?
You seem to get more trouble than most with Avast.
 
  • #322
Studiot said:
Borek, as a matter of interest do you use the free or pro version of Avast and do you use the sandbox?
You seem to get more trouble than most with Avast.

Do I? I don't recall stating I have serious problems with Avast. For most of the time it works OK, it failed once, and from what I was able to google it didn't failed just me, more people reported exactly the same problem with exactly the same virus. Free version on Marzena's computer, no idea what she did.
 
  • #323
Borek said:
502 again, second time today, just a minute ago.

First time it was much earlier, about 8:40 am my time (now is 11:16 am).

Minute after I posted forum died for me, I was not able to edit the post (and I already forgot why I wanted).
 
  • #324
For what it's worth, I have not noticed any problems with PF for several weeks now.
 
  • #325
Redbelly98 said:
For what it's worth, I have not noticed any problems with PF for several weeks now.

Me too.
 
  • #326
Borek said:
Was there any information about IP from which the attack came? If there is such information, compare it the to physicsforums.com IP which is 74.86.200.109.

dlgoff said:
Thanks Borek. I will set my pop-up AVAST messages to stay longer so next time I can get the IP if it's available.

It happened again and I got the IP. It wasn't Physicsforums.coms IP but I only get this alert while lurking here. Anyway, I attacked the pop-up info.
 

Attachments

  • Exploit.jpg
    Exploit.jpg
    20.1 KB · Views: 395
  • #327
Wow. PF hasn't been so fast since the attacks for me. Incredibly "fluid" now. A very good news for me. I was getting really annoyed to wait minutes and opening more than 10 pages for at least 1 to load.
Now all seems perfect! Good job guys.
 
  • #328
RE: Dlgoff/Avast picture

Yes I had a bunch of these yesterday.

A word of warning, the calling code remains in your internet cache until you clear this so this will keep popping up as you change web pages - it will also affect other sites and may (probably) not have come from PF. Mine started on Ebay.

So if you see this clear your internet cache.
 
  • #329
Studiot said:
RE: Dlgoff/Avast picture

Yes I had a bunch of these yesterday.

A word of warning, the calling code remains in your internet cache until you clear this so this will keep popping up as you change web pages - it will also affect other sites and may (probably) not have come from PF. Mine started on Ebay.

So if you see this clear your internet cache.

I use Firefox and clear the cache manually before entering PF. The browser is also set to clear everything on exit. So that's not the problem here.
 
Last edited:
  • #330
Sadly I am sure now my problems are not related directly to PF server, but to something on the route between server and me. At the moment I am using a proxy, as otherwise I am not able to neither read nor post.

Code: 
borek@invincible ~ $ ./checkPF
PING physicsforums.com (74.86.200.109) 56(84) bytes of data.

--- physicsforums.com ping statistics ---
10 packets transmitted, 0 received, 100% packet loss, time 8998ms

traceroute to physicsforums.com (74.86.200.109), 15 hops max, 40 byte packets
 1  192.168.0.7 (192.168.0.7)  0.589 ms  0.588 ms  0.550 ms
 2  10.0.0.138 (10.0.0.138)  0.994 ms  1.008 ms  0.959 ms
 3  * * *
 4  xxxxxx.tpnet.pl (80.xxx.xxx.xxx)  24.153 ms  165.036 ms  24.492 ms
 5  hbg-b2-link.telia.net (213.248.89.93)  40.131 ms  40.774 ms  42.829 ms
 6  hbg-bb1-link.telia.net (80.91.251.77)  39.855 ms  40.643 ms  40.277 ms
 7  nyk-bb1-link.telia.net (80.91.247.129)  123.609 ms  125.113 ms nyk-bb1-link.telia.net (80.91.247.127)  124.372 ms
 8  dls-bb1-link.telia.net (213.155.130.207)  165.240 ms  165.234 ms  164.837 ms
 9  te3-3.bbr02.eq01.dal01.networklayer.com (213.248.102.174)  164.725 ms  195.295 ms  165.761 ms
10  po6.dar02.sr01.dal01.networklayer.com (173.192.18.213)  165.601 ms  166.956 ms  166.006 ms
11  po2.fcr03.sr04.dal01.networklayer.com (66.228.118.190)  165.963 ms  166.384 ms  166.775 ms
12  * * *
13  * * *
14  * * *
15  * * *
 
Last edited:
  • #331
Seems like it is not the first time when there is a (routing?) problem at 66.228.118.190.

Sometimes pings to PF get through, sometimes they don't, but I can't reach PF by traceroute and I can't post/read without a proxy.
 
  • #332
I had similar problems with 66.228.118.186 last Saturday.
 
  • #333
I have Avast and I have not seen any popups when visiting PF.
 
  • #334
The forum is a bit slow this afternoon.

Or perhaps my brain is extra fast :biggrin:!

Hmm...no, it's the forum. Dang.
 
  • #335
Sunday afternoon/evening, PF died for me. I don't know if this was a widespread issue or if there were issues on the path between here and there.
 
  • #338
Is it just me, or is the forum slow today? For most of the time it goes OK, but then for a minute or two it freezes.
 
  • #339
Borek said:
Is it just me, or is the forum slow today? For most of the time it goes OK, but then for a minute or two it freezes.

Right now the forum is responsive.
But earlier today I got a couple of gateway timeouts that other people apparently didn't have.
When I watched what my browser was doing before a timeout, I saw that it happened when it was accessing mathjax.org...
I'm not sure yet however, that mathjax.org is the reason...
 
  • #340
I like Serena said:
Right now the forum is responsive.
But earlier today I got a couple of gateway timeouts that other people apparently didn't have.
When I watched what my browser was doing before a timeout, I saw that it happened when it was accessing mathjax.org...
I'm not sure yet however, that mathjax.org is the reason...

Yep, I got that too, a few times now. I'm using Chrome, and I get a message I've never seen before that mentioned mathjax. Nothing is responsive, not even the cursor. Lasts about 10 seconds.
 
  • #341
lisab said:
Yep, I got that too, a few times now. I'm using Chrome, and I get a message I've never seen before that mentioned mathjax. Nothing is responsive, not even the cursor. Lasts about 10 seconds.

please record the message next time it appears, thanks!
 
  • #342
Greg Bernhardt said:
please record the message next time it appears, thanks!

It was only a couple seconds this time:

Loading [MathJax]/jax/output/HTML-CSS/jax.js

Happens when I open Random Thoughts.
 
  • #343
lisab said:
It was only a couple seconds this time:

Loading [MathJax]/jax/output/HTML-CSS/jax.js

Happens when I open Random Thoughts.

This may be one of those case when you're getting the fonts from MathJax and they are a bit slow. I loaded the STIX fonts into my Win 7 Fonts folder and Firefox is lightning fast. Might be worth a try; if it can be done in Chrome.
 
  • #344
I now get some sort of mathjax.js echo on a blank screen before the forum comes up.
 
  • #345
Now I am getting 504 errors. Although I think that is not some problem with PF.
 

Attachments

  • error.jpg
    error.jpg
    15.8 KB · Views: 407
Last edited:
  • #346
mishrashubham said:
Now I am getting 504 errors. Although I think that is not some problem with PF.

This is PF problem, from what I remember nginex was added to help deal with DDOS attack, since then it sometimes gives 502 and 504 errors, at least for me. I have never seen these errors before DDOS attack.

IMHO MathJax problems are unrelated and appear when MathJax servers are not fast enough. Unfortunately Opera seems to deal incorrectly with such situations
 
  • #347
DaveC426913 said:
I now get some sort of mathjax.js echo on a blank screen before the forum comes up.

can you elaborate? what are you doing when this happens? does it happen all the time?
 
Last edited:
  • #348
It happens anytime you enter a thread, sometimes it goes so quickly that you really have to be looking for it to see it. This is the message.

www.physicsforums.com/clientscript/mjsettings.js[/URL]

I started noticing it last week. I saw that you were discusing the issue Greg, or at least I thought that was what you were discussing. I'll pm you.
 
Last edited by a moderator:
  • #349
MathJax is dependent on the Amazon CloudFront so there is little they can do in terms configuring that. One developer asked if anyone here would be willing to install a plugin that would collect data that would be useful in troubleshooting the loading problems. PM me if interested.
 
  • #350
Code: 
borek@invincible ~ $ ./checkPF
PING physicsforums.com (74.86.200.109) 56(84) bytes of data.

--- physicsforums.com ping statistics ---
10 packets transmitted, 0 received, 100% packet loss, time 8998ms

traceroute to physicsforums.com (74.86.200.109), 15 hops max, 40 byte packets
 1  192.168.0.7 (192.168.0.7)  0.606 ms  0.568 ms  0.524 ms
 2  10.0.0.138 (10.0.0.138)  1.064 ms  0.990 ms  0.950 ms
 3  * * *
 4  xxxxx.tpnet.pl (xx.xx.xx.xx)  23.406 ms  23.614 ms  25.603 ms
 5  hbg-b2-link.telia.net (213.248.89.93)  40.144 ms  40.535 ms  40.570 ms
 6  hbg-bb2-link.telia.net (80.91.251.81)  46.344 ms  40.094 ms  39.173 ms
 7  nyk-bb2-link.telia.net (80.91.247.123)  125.381 ms nyk-bb2-link.telia.net (80.91.247.125)  123.475 ms  124.499 ms
 8  dls-bb1-link.telia.net (213.155.130.67)  165.859 ms dls-bb1-link.telia.net (213.155.130.209)  164.422 ms  165.928 ms
 9  te3-3.bbr02.eq01.dal01.networklayer.com (213.248.102.174)  169.799 ms  170.488 ms  170.192 ms
10  po6.dar02.sr01.dal01.networklayer.com (173.192.18.213)  170.019 ms  170.199 ms  170.734 ms
11  po2.fcr03.sr04.dal01.networklayer.com (66.228.118.190)  171.852 ms *  170.112 ms
12  * * *
13  * * *
14  * * *
15  * * *

For over two hours I was cut off (starting around 21:32 my time). And it had nothing to do with yesterdays situation :wink:
 

Similar threads

PF Slow Again - Possible DDoS Attack?
Replies
4
Views
2K
Bug Slow Forum Apr 8: Limited Access, JS Error
Replies
7
Views
2K
Chemical Forums down, or how I learned what slowloris is
Replies
8
Views
1K
Complaint Possible Causes of Slow Response from PF and Solutions for Users and Staff
Replies
22
Views
5K
  • Sticky
Announcement Easy ways you can support Physics Forums
2
Replies
97
Views
48K
JavaScript PF Alert Machine: Can I Monitor Forum Alerts Without Logging In?
Replies
3
Views
1K
Could we make a practical solar fridge?
Replies
30
Views
3K
ABC reference frame synchronous generator modelling in Ltspice
Replies
1
Views
3K
11 reasons why you should be a Gold Member
Replies
13
Views
3K
I Lorentz Transformation: Premises + Derivation
Replies
5
Views
2K

Hot Threads

Recent Insights

Back
Top