Another DDOS ?

[ethereumhunter]

from last night until half hour ago, i can not login nor browse anything on here but for now, i think it will be good like before and i really hope that it will not because another DDOS.

i think we search from where IP that sending big large data to here and scan it so we can know who the attacker and maybe the attacker is jelous with bitcoin which getting big now.

[1714054287]

1714054287

[1714054287]

1714054287

[1714054287]

1714054287

[1714054287]

1714054287

[1714054287]

1714054287

[1714054287]

1714054287

[DimensionZ]

Hey guys, I have been off the forum for quite some time due to being busy with personal matters but now I am back. I have been trying to browse the forum since yesterday but it seems to be on and off all the time. Does anyone know what's going on with the hosting? And I am wondering if these issues only affect people from certain countries or is this a global problem with connecting to the forum?

[apoorvlathey]

The connection is still not perfectly reliable. The forum frequently can't be reached.
Also I have noticed that when the site is down, the favicon is also changed :



Hope it gets posted

[kenscho]

The connection is still not perfectly reliable. The forum frequently can't be reached.
Also I have noticed that when the site is down, the favicon is also changed :



Hope it gets posted

maybe another ddos

[x4]

I guess I only experiencing this issue, I can't browse or its too hard to browse here in forum but I can access any site only the forum. So I really tried to go here in meta but only this time, and see that everybody experienced also this issue and I hope that this will be solve as soon as possible.

[pooya87]

The connection is still not perfectly reliable. The forum frequently can't be reached.
Also I have noticed that when the site is down, the favicon is also changed :



Hope it gets posted

the icon thingy is a new feature in Google Chrome new version.
the icon is not changed but instead it is grayed out which happens for websites that can not be reached but has an icon probably saved on your cash.

p.s. I have been getting TIME_OUT a lot since yesterday!

[Wendigo]

Apparently using a VPN can fix the connection issues. I assume some areas have Bitcointalk blocked out for some reason. Is this due to a new hosting service or on purpose?

[redsn0w]

theymos,

can I ask you what's the reason why you're not using cloudflare or something like that (firstly to hide the ip of the server)?


The new IP should be:

Code:

redsn0w$ ping bitcointalk.org
PING bitcointalk.org (75.101.130.65): 56 data bytes

[superiorus]

Apparently using a VPN can fix the connection issues. I assume some areas have Bitcointalk blocked out for some reason. Is this due to a new hosting service or on purpose?

It does not fix the coonections issues.
In the last 2 days the forum was offline many times ...
If there is a DDOS: I don't understand: why to DDOS a forum?  What is the benefit?  There are no hideen coins in here (except those from theymos pocket)  

[1Referee]

In the last 2 days the forum was offline many times ...

Yes, it's very annoying but there is nothing that we can do. I only make sure that before I post something, I copy it to avoid having to type everything from scratch again as the page turns either blank, or shows an error.

If there is a DDOS: I don't understand: why to DDOS a forum?  What is the benefit?  There are no hideen coins in here (except those from theymos pocket)  

The guys behind this DDoS attack either want to piss off people here by keeping the site offline or very slow for a long time, or this DDoS attack is just some sort of distraction attempt as they are out for something else.

[btvGainer]

Can't something be done to prevent DDos?I saw some sites using DDoS protection by CloudFlare https://www.cloudflare.com/5xx-error-landing?utm_source=iuam to preventt his,can same be implented on this sorum?It is really very annoying when you make a long post and at the time of posting you couldn't connect to forum and lose all your reply https://www.cloudflare.com/5xx-error-landing?utm_source=iuam

[pereira4]

I was able to browse the forum last night without many problems again, but right now it's acting weird again, it takes a couple of F5 (refreshing) until the page shows up, so I guess the problem is still not fully solved.

[superiorus]

Yes, it's very annoying but there is nothing that we can do. I only make sure that before I post something, I copy it to avoid having to type everything from scratch again as the page turns either blank, or shows an error.

I learned that lesson too
I press the "back" button and save the text.

[FrilledShark]

Theymos has never stated is was a DDoS. If you read the other pages, you would know that.

Hm, it looked to me like some sort of upstream networking failure, but now it happened again on a different IP, so maybe it is a difficult-to-detect DDoS. I'll continue to investigate.

Edit: Sorry, it is an DDoS.

If it is a DDoS and you want to suggest Cloudflare, you should read his post here:

[...]
I'm not going to use Cloudflare for bitcointalk.org. Cloudflare is a massive central point of failure to the Internet. Tons of sites (including most large Bitcoin sites) use it. Additionally, in most cases Cloudflare can undetectably read any encrypted traffic passing through their service because they have the site's HTTPS key. Even if you use their keyless HTTPS feature, they can still read your traffic (though this is detectable with something like Certificate Patrol) because they have an agreement with a CA which allows them to issue whatever certificates they want (they are essentially a CA). Also, I've heard that Cloudflare is not especially effective at stopping many types of DDoS attack.

Instead, I purchased DDoS protection that works at a lower level. After filtering, it sends user TCP traffic to the forum's server verbatim. This eliminates the need for giving up the forum's HTTPS key. It seems to be effective at stopping this attacker's traffic, but it may be introducing some periodic downtime/slowness/latency. We're still looking into it. DDoS protection services (even the most expensive ones) are notorious for often being useless, shady, or unreliable, so who knows whether this service or any future ones I may try will end up working out... Unfortunately, the Internet is just particularly weak to DDoS attacks, and there are no great solutions available.

[apoorvlathey]

Theymos has never stated is was a DDoS. If you read the other pages, you would know that.
~snip~

An official announcement has been made on the forum's twitter page by theymos :

DDoS attack

it was posted 14h ago.

[mrcash02]

Theymos has never stated is was a DDoS. If you read the other pages, you would know that.
~snip~

An official announcement has been made on the forum's twitter page by theymos :

DDoS attack

it was posted 14h ago.

It's happen for me since two days ago. It's very boring, I didn't know if it was happening only here, but now I see it's general.

I hope they fix it soon or increase the protection against this kind of attack.

[theymos]

I have some ideas for how to mitigate the DDoS, but I might not finish it today.

As someone mentioned earlier, I don't want to use Cloudflare because Cloudflare can see/modify all encrypted traffic, they are a massive central point of failure on the Internet, IMO they probably assist and are supported by the NSA, they only protect against fairly small-scale attacks, and they really make life difficult for Tor users.

The UDP flood is causing high packet loss. What this will look like when browsing the forum is:
 - When you first connect to the forum after not browsing any pages for a while, it might be especially slow, and it might time out. After it completely fails / times out, just keep trying. It will eventually work.
 - After you first connect, browsing should be much smoother because at this point you'll already have a TCP connection open, though it might be a bit slow, and occasionally a page might time out.
 - If the page times out while posting, press the refresh button in your browser and accept any warning it gives you. Keep trying until it goes through.

[superiorus]

As someone mentioned earlier, I don't want to use Cloudflare because Cloudflare can see/modify all encrypted traffic, they are a massive central point of failure on the Internet, IMO they probably assist and are supported by the NSA, they only protect against fairly small-scale attacks, and they really make life difficult for Tor users.

I don't like Cloudflare too (too expensive and they can't manage/deny those attacks.
But there are other good alternatives:   Incapsula (a good one), Keycdn, Maxcdn, etc.

[theymos]

I changed something which may block the UDP flood. We'll see.

Email is probably broken again for most people. Note that the email is being sent, but your email provider is blocking it -- whenever I change IP addresses, I have to take a bunch of steps to make the IP look more "clean" for email purposes. I will fix this in a few days.

[crairezx20]

I have some ideas for how to mitigate the DDoS, but I might not finish it today.

As someone mentioned earlier, I don't want to use Cloudflare because Cloudflare can see/modify all encrypted traffic, they are a massive central point of failure on the Internet, IMO they probably assist and are supported by the NSA, they only protect against fairly small-scale attacks, and they really make life difficult for Tor users.

The UDP flood is causing high packet loss. What this will look like when browsing the forum is:
 - When you first connect to the forum after not browsing any pages for a while, it might be especially slow, and it might time out. After it completely fails / times out, just keep trying. It will eventually work.
 - After you first connect, browsing should be much smoother because at this point you'll already have a TCP connection open, though it might be a bit slow, and occasionally a page might time out.
 - If the page times out while posting, press the refresh button in your browser and accept any warning it gives you. Keep trying until it goes through.

Thanks admin for update this solution is for temporary since we are still browse inside of this forum.. the timeout and error everr minute is happening to me and i think the hacker who was DDOS attack this forum i hope they will be caught..
This attack is always happen when the price is increase just like before ..