+- Hack Forums (https://hackforums.net)
+-- Forum: Hack Forums Official Information (https://hackforums.net/forumdisplay.php?fid=1)
+--- Forum: Site News (https://hackforums.net/forumdisplay.php?fid=2)
+--- Thread: Slow Loading Times (/showthread.php?tid=5842695)
Pages: Pages
1
2
Slow Loading Times - Omniscient - May 30, 2018
We're experiencing an attack. I'm dealing with it now. We should be normal soon but you may experience additional Cloudflare captcha pages.
RE: Slow Loading Times - Gilbo - May 30, 2018
I thought it was my internet getting slow, thank you for the announcement.
RE: Slow Loading Times - ᴇccy - May 30, 2018
Those pesky nerds with their 50 $5 stressers
RE: Slow Loading Times - Frankey - May 30, 2018
(May 30, 2018 09:11 AM)ᴇccy Wrote: Those pesky nerds with their 50 $5 stressers
Feelsbadman. Got some connection refused messages, was already wondering what was going on. I hope that the attack will be fixed/stopped without any problems :)
RE: Slow Loading Times - Eagle 95 - May 30, 2018
I've had problems for the past hour or more. I have no more problems.
Good job.
RE: Slow Loading Times - TB12 - May 30, 2018
Thanks for the fix, people need to get a life honestly.
RE: Slow Loading Times - _aoding_ - May 30, 2018
(May 30, 2018 09:07 AM)Omniscient Wrote: We're experiencing an attack. I'm dealing with it now. We should be normal soon but you may experience additional Cloudflare captcha pages.
Is that why I was getting a 403 Forbidden? 🤦♂
RE: Slow Loading Times - ᴇccy - May 30, 2018
(May 30, 2018 09:27 AM)_aoding_ Wrote: Is that why I was getting a 403 Forbidden? 🤦♂
Yeah pretty sure everyone got it
RE: Slow Loading Times - Omniscient - May 30, 2018
Expect more Captcha pages to combat this. Working now with Cloudflare to mitigate this attack type.
RE: Slow Loading Times - Crystallize. - May 30, 2018
(May 30, 2018 10:17 AM)Omniscient Wrote: Expect more Captcha pages to combat this. Working now with Cloudflare to mitigate this attack type.
I really liked CoinHive’s captcha system, could we ever see it being implemented on HF too?
RE: Slow Loading Times - UpTheCrust - May 30, 2018
Greek CE scammer must butthurt about the undercover operation
RE: Slow Loading Times - Kawen - May 30, 2018
I would like to recommend https://www.reblaze.com/ is an alternative to cloudflare, to be able to mitigate the ddos attacks that are usually carried out, normally they are layer 7 (which I think HF suffers) have clients such as banks and airlines, I know them by astropaycard.com which is a company in which I made some contributions 2 years ago working for them with a practice contract, in this .pdf you can see the advantages offered by https://www.reblaze.com/resources/Reblaze-DDoS.pdf and if you are interested in knowing the differences and the improvements that you have vs cloudflare you can send an email to [email protected] ^^
In addition, if HF uses (I do not know) Amazon platforms, Google or Microsoft can be implemented in a very easy way with reblaze.com system, as they have associations with these companies
https://www.reblaze.com/cloud-platform-integration/
RE: Slow Loading Times - Crystallize. - May 30, 2018
(May 30, 2018 11:08 AM)Kawen Wrote: I would like to recommend https://www.reblaze.com/ is an alternative to cloudflare, to be able to mitigate the ddos attacks that are usually carried out, normally they are layer 7 (which I think HF suffers) have clients such as banks and airlines, I know them by astropaycard.com which is a company in which I made some contributions 2 years ago working for them with a practice contract, in this .pdf you can see the advantages offered by https://www.reblaze.com/resources/Reblaze-DDoS.pdf and if you are interested in knowing the differences and the improvements that you have vs cloudflare you can send an email to [email protected] ^^
In addition, if HF uses (I do not know) Amazon platforms, Google or Microsoft can be implemented in a very easy way with reblaze.com system, as they have associations with these companies
https://www.reblaze.com/cloud-platform-integration/
I believe CF have better mitigation system to be honest.
RE: Slow Loading Times - Kawen - May 30, 2018
(May 30, 2018 11:12 AM)Crystallize. Wrote: I believe CF have better mitigation system to be honest.
😵 you can send them an email and ask them [email protected]
(May 30, 2018 10:26 AM)Crystallize. Wrote: I really liked CoinHive’s captcha system, could we ever see it being implemented on HF too?
CoinHive gives problems with many blockers of ads and antivirus, directly with the domains where the .js are pointing to being a page dedicated to mining crypto (xmr) with your cpu
RE: Slow Loading Times - Omniscient - May 30, 2018
Quote:is an alternative to cloudflare, to be able to mitigate the ddos attacks that are usually carried out, normally they are layer 7 (which I think HF suffers
Realistically these services wouldn't have stopped this type of attack. It's similar to a Slowloris. Any large botnet can just send a slow flood of requests which would slow most sites down. We didn't go offline but it did cause a high enough load that pages took 3-5 seconds to load instead of the usual 1-2. The issue with these types of attacks is they are just slow enough not to trigger a firewall rule and any rule added would very likely effect normal traffic too.
Attacks like these require me to manually find patterns by going through the logs and mitigitating it manually (yes, I used the word "manually" twice, now three times, in this sentence).
In the past we've doubled up with both Cloudflare and Sucuri when it's really needed. Soon though we'll be on a new server which has more resources and should make these types of attacks even harder.
It's important to note, this attack has been going on all week. Hardly anyone but me noticed it and it was so negligible that I didn't even bother to mititigate it until today. My guess is that the attack will continue under new patterns and that some skid is just butthurt. They aren't taking us offline but I suppose they are getting some sadistic pleasure carrying on anyways.
The new server I'm adding the Nginx module for testcookie which would probably stop an attack of this nature. I have it installed now but it's not working properly because of our complex setup but it will be part of the new server.
I've dealt with attacks for over a decade. Nothing new and no big deal to me.