Jump to content

Archived

This topic is now archived and is closed to further replies.

LHookins

[RESOLVED] Suspected DDOS attack

Recommended Posts

When I'm surfing the Avsim forums, I typically have a page of topics and I'll click on several of those that interest me and let them load in the background, then go and read the threads. This comes from having a somewhat slower Internet connection. While my download speeds are good, the satellite connection takes a long time to do the necessary handshaking.

 

On this visit, I've started getting messages about suspected DDOS attacks from my IP instead of the threads. I'm guessing that eventually my IP address will be banned if this keeps up.

 

I don't know if the filters have been made more sensitive today, or if more connections per page are needed, or if my IP address has been flagged.

 

I'm not really in a position to load one page at a time. Can anything be done?

 

Hook

 

And when trying to go back to the main page after posting this, I get the message again:

 

We have detected a possible DDoS attack from your IP and your access has been blocked.

 

Hook


Larry Hookins

 

Oh! I have slipped the surly bonds of Earth
And danced the skies on laughter-silvered wings;

Share this post


Link to post
Share on other sites

When I'm surfing the Avsim forums, I typically have a page of topics and I'll click on several of those that interest me and let them load in the background, then go and read the threads. This comes from having a somewhat slower Internet connection. While my download speeds are good, the satellite connection takes a long time to do the necessary handshaking.

 

On this visit, I've started getting messages about suspected DDOS attacks from my IP instead of the threads. I'm guessing that eventually my IP address will be banned if this keeps up.

 

I don't know if the filters have been made more sensitive today, or if more connections per page are needed, or if my IP address has been flagged.

 

I'm not really in a position to load one page at a time. Can anything be done?

 

Hook

 

And when trying to go back to the main page after posting this, I get the message again:

 

We have detected a possible DDoS attack from your IP and your access has been blocked.

 

Hook

 

If you try to access ten pages in 5 seconds, you will get that result. That's a pretty liberal amount, so I suggest you take a look at how many you are trying to bring up at one time. I can tell you that by implementing this, our performance has gone up tremendously.

Share this post


Link to post
Share on other sites

If you try to access ten pages in 5 seconds, you will get that result. That's a pretty liberal amount,

 

That sounds good, but I didn't access any pages when composing that message, which took a lot longer than 5 seconds. After the message was posted, which also took longer than 5 seconds, I clicked on the The Avsim Community link and got the message. Then I couldn't get into Avsim for a while.

 

Check your timings, they may not be what you intended.

 

Hm. I don't think I could click on 10 topics in 5 seconds, even if I tried. Perhaps the logic that's counting pages is off. Click on one topic, get 3 pages counted. It may also have to do with the way the satellite does handshaking, or the fact that the browser is loading lots of stuff even after the page is complete.

 

Hook


Larry Hookins

 

Oh! I have slipped the surly bonds of Earth
And danced the skies on laughter-silvered wings;

Share this post


Link to post
Share on other sites

Five seconds between mouse clicks and it still comes up, then about 20 seconds to check which pages didn't load, click on The Avsim Community and still get the error.

 

Just a heads-up in the timing issue.

 

Hook


Larry Hookins

 

Oh! I have slipped the surly bonds of Earth
And danced the skies on laughter-silvered wings;

Share this post


Link to post
Share on other sites

It may also have to do with the way the satellite does handshaking, or the fact that the browser is loading lots of stuff even after the page is complete.

 

I suspect that it is more likely that the Sat company is caching pages, and that likely is the cause. Let it settle a bit and we'll play with the thresholds.

Share this post


Link to post
Share on other sites

it is more likely that the Sat company is caching pages

 

Ah, excellent point. Thanks, Tom.

 

Hook


Larry Hookins

 

Oh! I have slipped the surly bonds of Earth
And danced the skies on laughter-silvered wings;

Share this post


Link to post
Share on other sites

Just had it myself, cleared cookies in Firefox seems fine now. Don't know if that did anything or not.

Share this post


Link to post
Share on other sites

I started getting this tonight too off and on, using Chrome on Win7.

 

Perhaps the threshold is still being adjusted?


--John near KPAE

Share this post


Link to post
Share on other sites

Happened to me earlier and I didn't open 10 tabs in 5 seconds, I had about 3 open (for longer than 5 seconds) then tried to open 3 or 4 more quickly in a subforum and I couldn't access avsim for the next five or so minutes after that.

 

Happened again but much more briefly a few minutes ago but went away (no way did I even come close to 10 tabs in 5 seconds.)


Jay Vorkapic

 

pmdg_trijet.jpg

Share this post


Link to post
Share on other sites

I just got it again after opening 3 pages with a full timed 10 seconds between mouse clicks.

 

Hook


Larry Hookins

 

Oh! I have slipped the surly bonds of Earth
And danced the skies on laughter-silvered wings;

Share this post


Link to post
Share on other sites

Strange, glad I am not the only one

 

"We have detected a possible DDoS attack from your IP and your access has been blocked."


Brent Lewis

Share this post


Link to post
Share on other sites

I was about to open a topic about it. I'm having this issue myself too. Glad I'm not the only one. I usualy do the same thing Larry does. I open a few pages that interest me and leave them on the background, so that I don't forget to take a look at them. I could open a few pages one after the other without problems, but now when I open just two or three topics or forum pages in a sequence, I get the DDoS attack message.


Matheus Mafra

Share this post


Link to post
Share on other sites

Me too....


|Ryan Butterworth|

| i7 4790K@4.4GHz | 32GB RAM | EVGA GTX 1080Ti | ASUS Z97-Pro | 1TB 860 Evo | 500GB 840 Evo Win10 Pro | 1TB Samsung 7200rpm | Seasonic X750W |

 

 

Share this post


Link to post
Share on other sites

Might I suggest using an IP whitelist for subscribed members? Turn the filter on for all others?

 

I find Googling about various flight sim issues brings me to answers on Avsim first, might be a factor in the traffic...?

Share this post


Link to post
Share on other sites

I find Googling about various flight sim issues brings me to answers on Avsim first,

 

I gotta wonder if Google will still be able to index Avsim with the new filter.

 

Hook


Larry Hookins

 

Oh! I have slipped the surly bonds of Earth
And danced the skies on laughter-silvered wings;

Share this post


Link to post
Share on other sites

  • Tom Allensworth,
    Founder of AVSIM Online


  • Flight Simulation's Premier Resource!

    AVSIM is a free service to the flight simulation community. AVSIM is staffed completely by volunteers and all funds donated to AVSIM go directly back to supporting the community. Your donation here helps to pay our bandwidth costs, emergency funding, and other general costs that crop up from time to time. Thank you for your support!

    Click here for more information and to see all donations year to date.
  • Donation Goals

    AVSIM's 2020 Fundraising Goal

    Donate to our annual general fundraising goal. This donation keeps our doors open and providing you service 24 x 7 x 365. Your donation here helps to pay our bandwidth costs, emergency funding, and other general costs that crop up from time to time. We reset this goal every new year for the following year's goal.


    31%
    $7,750.00 of $25,000.00 Donate Now
×
×
  • Create New...