[Omniscient]

We're experiencing an attack. I'm dealing with it now. We should be normal soon but you may experience additional Cloudflare captcha pages.

[Gilbo]

I thought it was my internet getting slow, thank you for the announcement.

[ᴇccy]

Those pesky nerds with their 50 $5 stressers

[Frankey]

Those pesky nerds with their 50 $5 stressers

Feelsbadman. Got some connection refused messages, was already wondering what was going on. I hope that the attack will be fixed/stopped without any problems :)

[Eagle 95]

I've had problems for the past hour or more. I have no more problems.

Good job.

[TB12]

Thanks for the fix, people need to get a life honestly.

[_aoding_]

We're experiencing an attack. I'm dealing with it now.  We should be normal soon but you may experience additional Cloudflare captcha pages.

Is that why I was getting a 403 Forbidden? 🤦‍♂

[ᴇccy]

Is that why I was getting a 403 Forbidden?  🤦‍♂

Yeah pretty sure everyone got it

[Omniscient]

Expect more Captcha pages to combat this. Working now with Cloudflare to mitigate this attack type.

[Crystallize.]

Expect more Captcha pages to combat this.  Working now with Cloudflare to mitigate this attack type.

I really liked CoinHive’s captcha system, could we ever see it being implemented on HF too?

[UpTheCrust]

Greek CE scammer must butthurt about the undercover operation

[Kawen]

I would like to recommend https://www.reblaze.com/ is an alternative to cloudflare, to be able to mitigate the ddos attacks that are usually carried out, normally they are layer 7 (which I think HF suffers) have clients such as banks and airlines, I know them by astropaycard.com which is a company in which I made some contributions 2 years ago working for them with a practice contract, in this .pdf you can see the advantages offered by https://www.reblaze.com/resources/Reblaze-DDoS.pdf and if you are interested in knowing the differences and the improvements that you have vs cloudflare you can send an email to [email protected] ^^

In addition, if HF uses (I do not know) Amazon platforms, Google or Microsoft can be implemented in a very easy way with reblaze.com system, as they have associations with these companies
https://www.reblaze.com/cloud-platform-integration/

[Crystallize.]

I would like to recommend https://www.reblaze.com/ is an alternative to cloudflare, to be able to mitigate the ddos attacks that are usually carried out, normally they are layer 7 (which I think HF suffers) have clients such as banks and airlines, I know them by astropaycard.com which is a company in which I made some contributions 2 years ago working for them with a practice contract, in this .pdf you can see the advantages offered by https://www.reblaze.com/resources/Reblaze-DDoS.pdf and if you are interested in knowing the differences and the improvements that you have vs cloudflare you can send an email to [email protected]  ^^

In addition, if HF uses (I do not know) Amazon platforms, Google or Microsoft can be implemented in a very easy way with reblaze.com system, as they have associations with these companies
https://www.reblaze.com/cloud-platform-integration/

I believe CF have better mitigation system to be honest.

[Kawen]

I believe CF have better mitigation system to be honest.

😵 you can send them an email and ask them [email protected]

---

I really liked CoinHive’s captcha system,  could we ever see it being implemented on HF too?

CoinHive gives problems with many blockers of ads and antivirus, directly with the domains where the .js are pointing to being a page dedicated to mining crypto (xmr) with your cpu

[Omniscient]

is an alternative to cloudflare, to be able to mitigate the ddos attacks that are usually carried out, normally they are layer 7 (which I think HF suffers

Realistically these services wouldn't have stopped this type of attack. It's similar to a Slowloris. Any large botnet can just send a slow flood of requests which would slow most sites down. We didn't go offline but it did cause a high enough load that pages took 3-5 seconds to load instead of the usual 1-2. The issue with these types of attacks is they are just slow enough not to trigger a firewall rule and any rule added would very likely effect normal traffic too.

Attacks like these require me to manually find patterns by going through the logs and mitigitating it manually (yes, I used the word "manually" twice, now three times, in this sentence).

In the past we've doubled up with both Cloudflare and Sucuri when it's really needed. Soon though we'll be on a new server which has more resources and should make these types of attacks even harder.

It's important to note, this attack has been going on all week. Hardly anyone but me noticed it and it was so negligible that I didn't even bother to mititigate it until today. My guess is that the attack will continue under new patterns and that some skid is just butthurt. They aren't taking us offline but I suppose they are getting some sadistic pleasure carrying on anyways.

The new server I'm adding the Nginx module for testcookie which would probably stop an attack of this nature. I have it installed now but it's not working properly because of our complex setup but it will be part of the new server.

I've dealt with attacks for over a decade. Nothing new and no big deal to me.