We're drowning in lurkers

Quote:

---

Originally Posted by mtnrider

It doesn't look like we have the "lurkers" anymore but the site is still running really slow for me the last day or 2? How is it working for everyone else?

/

---

Same for me. Phone or desktop.

Quote:

---

Originally Posted by mtnrider

It doesn't look like we have the "lurkers" anymore but the site is still running really slow for me the last day or 2? How is it working for everyone else?

/

---

slow no matter what device I'm on


Sent by a free-range electronic weasel, with no sense of personal space.

Good luck dealing with it guys. I hate website support.
Does something like cloudflare, etc. work well for a forum? I know when we enabled it for a couple of our sites, we ended up with a lot less malware/attack maintenance, but they are pretty static sites.

Yup-still slow here too.

Sllooooooooooooooooooooooooooooooooooooooowwww...

Better than the other day but still slow for me too.

Quote:

---

Originally Posted by J

I've been fighting with this a good bit this afternoon/evening. It might continue to be a bumpy ride for a bit, until our attacker gets a tired of his hijinx.

It seems that someone has found a vulnerability in a large colocation provider. We have received several moderate level DoS attacks at various times today. Unfortunately, the provider that has been compromised has many servers, over almost a dozen locations, so it has been difficult to lock that host out of the firewall entirely in a preventative process. Like many CoLo providers, they have acquired sporadic/random class Bs and Cs from their upstream (and LARGE) ISPs as needed, that would lock out many members with a wide scale rule in the firewall.

We have been locking out individual class C subnets reactively as attacks present themselves. I am also contracting this provider with what data I have, in hopes they can assist. Unfortunately, it probably isn't servers directly administered by this provider, but those of a client that rents space from them.

Hopefully it starts performing better with the newest round of firewall drop rules.

---

No clue what you just said, but boy we are glad to have you.

Still slow here or is it just me ?

Still slow...but better than a couple of days ago [Coffee]

Been a member of some boards that the only "solution" was to restrict access to registered users and block new requests until things calmed down. A really ugly, if effective method.