Slow forum/Am I under attack?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Trichrome
    New Member
    • Feb 2007
    • 13
    • 3.6.x

    Slow forum/Am I under attack?

    Recently I have been battling trolls, and I think they have figured out a way to slow my forum WAY down. For the last three days, if I'm lucky enough to get to the forums page, when I hit "View new posts" it will slowly take me to a "Cannot be displayed" page. This will go on up to three hours or more, then it will be fine for a short period.

    What do I look for to determine if it's the server or something else frigging up the works? And I'm no computer expert, either.

    Thanks!
    Last edited by Trichrome; Fri 2 Feb '07, 5:31pm.
  • Trichrome
    New Member
    • Feb 2007
    • 13
    • 3.6.x

    #2
    Man, this sucks. It lets me access the forums page, then goes to a "page cannot be displayed" window.

    Comment

    • Trichrome
      New Member
      • Feb 2007
      • 13
      • 3.6.x

      #3
      It's odd, in the evening it gets back to normal.

      So, nobody here has had to deal with malicious trolls before?

      Comment

      • Trichrome
        New Member
        • Feb 2007
        • 13
        • 3.6.x

        #4
        Well, I can see I'm gonna get educated here.

        Comment

        • Wannakno
          Senior Member
          • Mar 2006
          • 252
          • 3.6.x

          #5
          be patient.. the staff should reply by tomorrow
          either that or make a ticket!

          Comment

          • Trichrome
            New Member
            • Feb 2007
            • 13
            • 3.6.x

            #6
            Ha!

            Comment

            • Steve Machol
              Former Customer Support Manager
              • Jul 2000
              • 154488

              #7
              Sounds lkike a DoS attack (Denial of Service). There is not much you can do to stop this from the vB end of things. You need to contact your host about this. Good luck.
              Steve Machol, former vBulletin Customer Support Manager (and NOT retired!)
              Change CKEditor Colors to Match Style (for 4.1.4 and above)

              Steve Machol Photography


              Mankind is the only creature smart enough to know its own history, and dumb enough to ignore it.


              Comment

              • Trichrome
                New Member
                • Feb 2007
                • 13
                • 3.6.x

                #8
                Well, I just got off the phone with Ipowerweb and they said they can't do anything about it. I was instructed to contact the VBulletin website.

                Comment

                • SSSlippy
                  Senior Member
                  • Jan 2006
                  • 551

                  #9
                  A DOS attack is an attack vs server and nothing vbulletin can do.

                  Comment

                  • Trichrome
                    New Member
                    • Feb 2007
                    • 13
                    • 3.6.x

                    #10
                    I wonder why the guy at Ipowerweb said they couldn't do anything?

                    Comment

                    • Wannakno
                      Senior Member
                      • Mar 2006
                      • 252
                      • 3.6.x

                      #11
                      Originally posted by Trichrome
                      I wonder why the guy at Ipowerweb said they couldn't do anything?
                      probably they dont know what there talking about...
                      you should consider switching hosts and when so ask them about dos protection or some other service (if there is such thing) Im sure there is.
                      But vbulletin cant stop that because there attacking the SERVER END not the VB END.

                      Comment

                      • Trichrome
                        New Member
                        • Feb 2007
                        • 13
                        • 3.6.x

                        #12
                        And I just went with 5 years of Ipowerweb. Crap.

                        Comment

                        • Rick Grunwald
                          Senior Member
                          • Feb 2005
                          • 211
                          • 3.0.6

                          #13
                          I wouldn't be too quick to jump hosts over one bad answer - especially if you have been reasonably happy with them for 5 years.

                          Do you have access to your logs? If so check them. (Mine are generated in a folder off my root above public_html) If you don't have access call back and have them provide them. Get the IP that has been causing the issue and ban it or ban a range

                          I have a small private FTP server and it was getting hammered this morning. The logs showed a brute force attack starting with the user name "administrator" with a slew of passwords, then repeated with "admin" and off into common names. I kicked them and banned the range (coming from the Asia Pacific area). They will move on and I can if I choose unban that IP block.

                          Check with your host and see what you can find out.

                          Don't let the dirtbags get you down
                          Rick Grunwald
                          http://grunwalds.com
                          XP home SP2, Celeron 2gb, 2GB RAM, Zone Alarm Security Suite

                          Comment

                          • Trichrome
                            New Member
                            • Feb 2007
                            • 13
                            • 3.6.x

                            #14
                            Yes Rick, I can access my logs. What do I look for? They're a million bits of info all gobbed together with no rhymne or reason to it.

                            Comment

                            • Trichrome
                              New Member
                              • Feb 2007
                              • 13
                              • 3.6.x

                              #15
                              What does it mean when there is more than one guest showing up at the same time, with the same IP (or all but the last set of numbers) showing up on the "who's online" page?

                              I banned an entire range, 74.6., because there would be a dozen or more of them showing up like that.
                              Since I've done that, my forum is running smooth.

                              Hmmmmmm.

                              Any sage advice?

                              And thanks for what's been given already!

                              Comment

                              Related Topics

                              Collapse

                              Working...