Print Topic

SimplyScripts Screenwriting Discussion Board  /  News  /  It's me, not you.  Experiencing a DDOS attack
Posted by: Don, April 27th, 2020, 9:27pm
The site may be down for slow for some of you.  I'm in the middle of a distributed denial of service attack wherein 100+ computes attempt to brute-force access the site.  I'm working with my server provider to isolate the issue.  

Bear with.  



Don
Posted by: LC, April 27th, 2020, 10:42pm; Reply: 1
Aha! Well, I'm glad it's not just me.   :D

What a pain in the butt for you, Don.
Posted by: FrankM, April 28th, 2020, 1:39pm; Reply: 2
I don't get the point of DOS'ing a site like this.

Everybody click on the ads so Don can afford Cloudflare :)
Posted by: Zack, April 28th, 2020, 1:55pm; Reply: 3
Glad I saw this. I thought my PC was finally crapping out on me. Lol
Posted by: eldave1, April 28th, 2020, 3:32pm; Reply: 4
Was out - normal today
Posted by: DustinBowcot (Guest), April 29th, 2020, 2:51am; Reply: 5
Why are they attacking this site? Distributed seems too orchestrated for a little old writing site to me. It must be personal.
Posted by: Don, April 29th, 2020, 8:34am; Reply: 6
Quick update.  I don't think it is personal.  It is a distributed attack coming primarily from Romania and Albania. This looks like a script kiddie attack directed at the WordPress login trying to brute force the password which is what brought down the server.  I've blocked that, but still hundreds of pings to the site per second slows things down.

- Don
Posted by: Grandma Bear, April 29th, 2020, 8:45am; Reply: 7
Kids stuck inside with nothing better to do than work on their hacker skills.  :)
Posted by: FrankM, April 29th, 2020, 11:17am; Reply: 8

Quoted from Grandma Bear
Kids stuck inside with nothing better to do than work on their hacker skills.  :)


The part of a script kiddie assault that takes the most skill is hitting the CTRL and V keys at the same time.
Posted by: Grandma Bear, May 8th, 2020, 10:22am; Reply: 9
Still having issues? Portal loads fine. Individual threads seem to be okay. Recent posts does not work. I also typed something lengthy up in the plague thread earlier, but when I went to post it, the website timed out and my post got lost.
Posted by: eldave1, May 8th, 2020, 5:09pm; Reply: 10

Quoted from Grandma Bear
Still having issues? Portal loads fine. Individual threads seem to be okay. Recent posts does not work. I also typed something lengthy up in the plague thread earlier, but when I went to post it, the website timed out and my post got lost.


HAving problems today myself - timing o ut
Posted by: Don, May 8th, 2020, 5:25pm; Reply: 11
Another attack.  I've reset the server.  We should be good for a while, now.



Don
Posted by: LC, May 17th, 2020, 7:46pm; Reply: 12
Is it just me, or is the site slow again? I'm having trouble opening some stuff and getting time-outs.

Go on, say it's just me.  ;D
Posted by: Zack, May 18th, 2020, 9:34am; Reply: 13
Not just you, Libby. I'm still having issues as well.
Posted by: Don, May 18th, 2020, 12:15pm; Reply: 14

Quoted from Zack
Not just you, Libby. I'm still having issues as well.


Hi Folks,

Apologies for the issues.  I've  bounced the server and am investigating.

Don
Posted by: Grandma Bear, May 19th, 2020, 7:28am; Reply: 15
Still having a hard time getting in here sometimes. 50/50 chance. Portal button works better than recent posts button which almost never works. When it does it takes so long to load the page it sometimes times out...
Posted by: ajr, May 19th, 2020, 7:40am; Reply: 16
Don, just lemme know who I gotta sic cousin Vito on...

Capisce?

Fugghedaboudit...

AJR
Posted by: Don, May 19th, 2020, 4:12pm; Reply: 17

Quoted from ajr
Don, just lemme know who I gotta sic cousin Vito on...

Capisce?

Fugghedaboudit...

AJR


I would love that.  

I've finally broken down and am in the middle of working with a security provider.  They are scanning the site atm.  I hope this helps to improve the uptime.

Don
Posted by: Don, May 20th, 2020, 11:44am; Reply: 18

Quoted from PKCardinal
Can someone explain to me what the goal of a DDoS attack on a site like this is?

Is it just general jerkiness? Or, is there an actual point?


General jerkiness. And to show they can do it.  

Actually, it isn't a DDoS attack, it is a distributed brute force attack. Someone is trying to brute force crack my Word Press password. While I removed the login file, still having essentially several hundred pings per second to the site eventually slows it down long enough to bring it down.

In the past it was easy for me to just block a particular IP address or two or a country, but with VPNs and the shear number of zombie computers available, the hackers can bring several thousand different IPs to bear, more than I can keep track of.

A few years ago, I had an attack from Romania.  I just blocked the entire country, but down the attacks are coming from all over the world.



And the mods will probably delete this since it is off topic.

- Don
Posted by: MarkRenshaw, May 21st, 2020, 6:02am; Reply: 19
I'm not able to write any comments on front page articles. Is this to help stop the attacks?

The error I get is below if it helps.

Access Denied - Sucuri Website Firewall
If you are the site owner (or you manage this site), please whitelist your IP or if you think this block is an error please open a support ticket and make sure to include the block details (displayed in the box below), so we can assist you in troubleshooting the issue.

Block details:
Your IP:     92.11.110.33
URL:     http://www.simplyscripts.com/wp-comments-post.php
Your Browser:     Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36
Block ID:     CMB055
Block reason:     Comments and xmlrpc are being blocked on this site.
Time:     2020-05-21 07:00:36
Server ID:     13017
Posted by: Zack, May 26th, 2020, 12:29am; Reply: 20
Anyone else getting an ad every time they try to get on the discussion board?
Posted by: LC, May 26th, 2020, 2:54am; Reply: 21
I'm not getting an ad, Zack. But I'm still getting a lot of lag.

I've been going to the Portal page like Pia suggested instead of recent posts and things kick in a lot quicker.
Posted by: Zack, May 26th, 2020, 1:34pm; Reply: 22

Quoted from LC
I'm not getting an ad, Zack. But I'm still getting a lot of lag.



It only happens when I try to access the discussion board from the home page. Maybe it's something on my end. I need a new computer. Lol
Posted by: JEStaats, May 26th, 2020, 2:03pm; Reply: 23
That happened to me a few weeks back but not recently.
Posted by: Don, May 26th, 2020, 5:06pm; Reply: 24

Quoted from MarkRenshaw
I'm not able to write any comments on front page articles. Is this to help stop the attacks?

The error I get is below if it helps.

Access Denied - Sucuri Website Firewall
If you are the site owner (or you manage this site), please whitelist your IP or if you think this block is an error please open a support ticket and make sure to include the block details (displayed in the box below), so we can assist you in troubleshooting the issue.

Block details:
Your IP:     92.11.110.33
URL:     http://www.simplyscripts.com/wp-comments-post.php
Your Browser:     Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36
Block ID:     CMB055
Block reason:     Comments and xmlrpc are being blocked on this site.
Time:     2020-05-21 07:00:36
Server ID:     13017


Mark,

Thanks for pointing this out.  Let me take a look.  I'm still figuring out the security software.

Don

Zack,

Next time you get an add, can you grab a screenshot?

Don

Posted by: Zack, May 26th, 2020, 5:10pm; Reply: 25

Quoted from Don

Zack,

Next time you get an add, can you grab a screenshot?


Shouldn't be a problem. :)
Posted by: JEStaats, May 26th, 2020, 5:56pm; Reply: 26
Don - I just sent you a screenshot of the ad that popped up for me. From my phone, it occurs when going from homepage to the discussion board. It's never happened from a desktop or laptop.
Posted by: Don, May 26th, 2020, 6:13pm; Reply: 27

Quoted from JEStaats
Don - I just sent you a screenshot of the ad that popped up for me. From my phone, it occurs when going from homepage to the discussion board. It's never happened from a desktop or laptop.


Henceforth, All Users Must Use a Laptop!

j/k.  Thanks for the info.  I'll go see why Google is screwing me (probably my error).

Don
Posted by: Zack, May 26th, 2020, 6:56pm; Reply: 28
Sent ya' a screenshot, Don. Hope it helps. :)
Posted by: Don, May 26th, 2020, 7:30pm; Reply: 29

Quoted from Zack
Sent ya' a screenshot, Don. Hope it helps. :)


Zack, (and John)

It does.  

I've made an adjustment to the template.  Let me know if you are still seeing the ad.  I don't need another screenshot.

Don
Posted by: spesh2k, May 26th, 2020, 7:41pm; Reply: 30
I was only seeing an ad when accessing from my phone. But all I had to do was go back and click again and it would bring me to the discussion board from the home page.
Print page generated: March 28th, 2024, 9:09am