Page 2 of 2

Re: Has anyone noticed…

Posted: Sat Jan 13, 2024 10:57 am
by Tom Allen
I'm also experiencing severe slowdowns with some sites I need for work lately. Perhaps Amazon is doing a major server upgrade?

Re: Has anyone noticed…

Posted: Sun Jan 14, 2024 12:19 am
by Loxx
Someone is executing a script against the site. For example the journey thread of cshorts had about 395000 views two days ago, now it has over 631000 views, so it has gained over 235000 views in just two days. No wonder if the site is a bit slow...

Re: Has anyone noticed…

Posted: Sun Jan 14, 2024 7:51 am
by WifeIsVanilla
Loxx wrote: Sun Jan 14, 2024 12:19 am Someone is executing a script against the site. For example the journey thread of cshorts had about 395000 views two days ago, now it has over 631000 views, so it has gained over 235000 views in just two days. No wonder if the site is a bit slow...
That makes sense. Other journeys have unrealistic numbers of views as well. Can we defend against this attack?

Re: Has anyone noticed…

Posted: Thu May 02, 2024 2:24 am
by Schnoff
We might be able to. We are running through CloudFlare, so we could put something in place that reduces that kind of spam. I don’t protect web servers as a job: I’d need some guidance from someone who’s done it before and can suggest what to tweak in the CF settings to keep this kind of stuff out while not impacting legitimate users too much. I think CF has some form of “prove you are human when attack detected” setting.

Any volunteers? Yes you ;).

Re: Has anyone noticed…

Posted: Thu May 02, 2024 2:31 am
by Schnoff
So, next time this happens, I think one of the admins needs to click the “we are under attack” button in CloudFlare, which would slow access down for everyone while still allowing users through.

The alternative is an “enterprise bot management” which yeah, no. https://developers.cloudflare.com/bots/ ... scription/