PDA

View Full Version : So what's going on?



Parkbandit
01-20-2015, 11:50 AM
Are the forums down due to ddos attacks or lack of bandwidth?

Is there something we can do to help keep them up?

SHAFT
01-20-2015, 11:53 AM
Clearly isis hates our way of life and our freedom on the PC. Unless 200m is paid, they will continue their assault on the PC.

Kranar
01-20-2015, 10:43 PM
The forums have been under a constant DDOS attack, in fact it's still being attacked as we speak. It's happened several times before but never this big and for a sustained period of time. Guess this site really pissed someone off.

Anyways, to mitigate the effect of the attack I basically contracted a third party to install some DDOS blocking proxies. It will prevent DDOS attacks of up to 10 Gbps. The current attack right now got as high as 2 Gbps so we should be fine for the time being. If the DDOS attack does increase to beyond 10 Gbps there are plans available to add additional protection and it should only take a couple of hours to update further.

I would have had this issue fixed sooner but the long weekend and all kind of slowed things down.

Viekn
01-20-2015, 10:49 PM
Thanks very much for taking the time to explain. It's nice just to know what's going on.

Warriorbird
01-20-2015, 10:55 PM
It's good to know. I'm glad this place has an administrator that's so good with IT issues. Thanks.

Kranar
01-21-2015, 12:07 PM
And to top it off there were some config issues that were causing redirects to http://forum.gsplayers.com/cgi-sys/suspendedpage.cgi

That has now been resolved.

Androidpk
01-21-2015, 12:16 PM
The forums have been under a constant DDOS attack, in fact it's still being attacked as we speak. It's happened several times before but never this big and for a sustained period of time. Guess this site really pissed someone off.

Anyways, to mitigate the effect of the attack I basically contracted a third party to install some DDOS blocking proxies. It will prevent DDOS attacks of up to 10 Gbps. The current attack right now got as high as 2 Gbps so we should be fine for the time being. If the DDOS attack does increase to beyond 10 Gbps there are plans available to add additional protection and it should only take a couple of hours to update further.

I would have had this issue fixed sooner but the long weekend and all kind of slowed things down.

I can't imagine it is just some random person.

Tisket
01-21-2015, 12:18 PM
The forums have been under a constant DDOS attack, in fact it's still being attacked as we speak. It's happened several times before but never this big and for a sustained period of time. Guess this site really pissed someone off.

Anyways, to mitigate the effect of the attack I basically contracted a third party to install some DDOS blocking proxies. It will prevent DDOS attacks of up to 10 Gbps. The current attack right now got as high as 2 Gbps so we should be fine for the time being. If the DDOS attack does increase to beyond 10 Gbps there are plans available to add additional protection and it should only take a couple of hours to update further.

I would have had this issue fixed sooner but the long weekend and all kind of slowed things down.

I've said it before but it bears repeating: you are the man.

Tisket
01-21-2015, 12:26 PM
Also, I think Buckwheat deserves thanks for providing a place for us to check PC status at http://gsplayersisdown.info/index.php

Thanks, man.

Tgo01
01-21-2015, 01:47 PM
The forums have been under a constant DDOS attack, in fact it's still being attacked as we speak. It's happened several times before but never this big and for a sustained period of time. Guess this site really pissed someone off.

Anyways, to mitigate the effect of the attack I basically contracted a third party to install some DDOS blocking proxies. It will prevent DDOS attacks of up to 10 Gbps. The current attack right now got as high as 2 Gbps so we should be fine for the time being. If the DDOS attack does increase to beyond 10 Gbps there are plans available to add additional protection and it should only take a couple of hours to update further.

I would have had this issue fixed sooner but the long weekend and all kind of slowed things down.

I was just about to thank you for everything when the site went down again :/

Another attack?

Thank you for everything that you do to keep PC running, Kranar.

Taernath
01-21-2015, 01:51 PM
I'VE MISSED YOU ALL SO MUCH PLEASE DON'T LEAVE ME AGAIN

Kranar
01-21-2015, 01:53 PM
I was just about to thank you for everything when the site went down again :/

Another attack?

Thank you for everything that you do to keep PC running, Kranar.

Not another attack, just some problems getting this anti-DDOS proxy set up. I don't think I ever anticipated someone actually wanting to DDOS this site so heavily before so never prepared for it.

I hope that all issues are resolved now but there could be some inconveniences for the remainder of the day.

Androidpk
01-21-2015, 01:55 PM
Also, I think Buckwheat deserves thanks for providing a place for us to check PC status at http://gsplayersisdown.info/index.php

Thanks, man.

Ditto. Thanks, Buck.

Buckwheet
01-21-2015, 01:57 PM
Ditto. Thanks, Buck.

Sure thing.

Kranar
01-21-2015, 01:59 PM
Also, I think Buckwheat deserves thanks for providing a place for us to check PC status at http://gsplayersisdown.info/index.php

Thanks, man.

Definitely worth pointing out. In the future I can use it as a place to post updates on outages.

caelric
01-21-2015, 03:13 PM
Not another attack, just some problems getting this anti-DDOS proxy set up. I don't think I ever anticipated someone actually wanting to DDOS this site so heavily before so never prepared for it.

I hope that all issues are resolved now but there could be some inconveniences for the remainder of the day.

Must be someone who was really pissed off at GS and SIMU in general, since they were suffering from some issues as well, that look to be related (from my outsider's POV, at least)

waywardgs
01-21-2015, 03:41 PM
Thanks guys!

Candor
01-21-2015, 04:10 PM
Not another attack, just some problems getting this anti-DDOS proxy set up. I don't think I ever anticipated someone actually wanting to DDOS this site so heavily before so never prepared for it.

I hope that all issues are resolved now but there could be some inconveniences for the remainder of the day.

Thanks for all your work.

WRoss
01-21-2015, 06:19 PM
I blame Baelog

Whirlin
01-21-2015, 09:32 PM
I blame Klaive...

Unrelated Stahp picture I just wanted to post somewhere:
http://i.imgur.com/CAXLctx.gif

m444w
01-21-2015, 09:33 PM
Either a system is malfunctioning, or someone has been trying to hack my PC account all night long thinking they have an opportunity because I haven't been around much:

http://whatmyip.co/info/whois/162.222.212.25

is the IP address

Buckwheet
01-21-2015, 10:18 PM
Either a system is malfunctioning, or someone has been trying to hack my PC account all night long thinking they have an opportunity because I haven't been around much:

http://whatmyip.co/info/whois/162.222.212.25

is the IP address

That is the new proxying service Kranar said he signed up for. So everyone's IP address to the forum has now changed to be whatever the proxy IP is.

blanks
01-21-2015, 10:58 PM
Someone was asking me to post about how they are having problems logging into PC. They keep getting the wrong username or password even after they tried the "forget password" option. Is anyone else experiencing this issue or have a fix to it?


Thanks in advance for 'em.

Kranar
01-21-2015, 11:28 PM
Anyone experiencing login issues can e-mail me at kranar@hotmail.com and I can have their password reset.

m444w
01-22-2015, 09:51 AM
That is the new proxying service Kranar said he signed up for. So everyone's IP address to the forum has now changed to be whatever the proxy IP is.


That makes sense I didn't have time to look at it much, though I am surprised they don't set an X-Forwarded-For header, though maybe vbulletin just doesn't read that.

Thanks for cross-referencing the IP for me Buckwheet.

Buckwheet
01-22-2015, 10:05 AM
That makes sense I didn't have time to look at it much, though I am surprised they don't set an X-Forwarded-For header, though maybe vbulletin just doesn't read that.

Thanks for cross-referencing the IP for me Buckwheet.

It is also why people can't login. Vbulletin is tracking IP addresses where people attempt to login from to prevent brute force attacks. So if you fail, and I fail, and one other person fails, even if the accounts are different, Vbulletin is going to block further logins from that IP address. Which is the address of the proxy now.

I understand why Kranar did what he did, I just hope his proxying service can remove those limitations otherwise he will need to find a better solution.

Buckwheet
01-22-2015, 10:12 AM
Also, I think Buckwheat deserves thanks for providing a place for us to check PC status at http://gsplayersisdown.info/index.php

Thanks, man.

Sure thing. Its been around since 2013 when there were all the connection issues. I just had to purge most of the member database back in Novemeber due to all the spam the board got when I wasn't paying attention.

Kranar
01-22-2015, 10:49 AM
To people experiencing login issues, try logging in now with your existing password, and if that doesn't work then reset your password. If that still doesn't work write me another e-mail at kranar@hotmail.com and I can have your password reset.

Latrinsorm
01-22-2015, 11:11 AM
Cheers, Kranar. I'm glad the PC is back.

Luftstreitkräfte
01-22-2015, 11:18 AM
100% functionality for me now, I had the "wrong password, 15 minute wait time" error before but it's now cleared.

Keller
01-22-2015, 11:25 AM
I want to know why we got DDOS'd.

Tisket
01-22-2015, 12:39 PM
I want to know why we got DDOS'd.

Because some bitter, angsty nobody decided to take out their frustration at life on the PC.

Velfi
01-22-2015, 12:43 PM
Because some bitter, angsty nobody decided to take out their frustration at life on the PC.

My money would be on a particular bitter, angsty myklian nobody.

Tisket
01-22-2015, 12:44 PM
Gibrefecal?

Tisket
01-22-2015, 12:45 PM
Say names. Implying is for pussies.

Androidpk
01-22-2015, 12:47 PM
Say names. Implying is for pussies.

She meant Inspire.

Tisket
01-22-2015, 12:52 PM
Well, he's a bitter nobody for sure but, I'm not convinced he's smart enough.

Androidpk
01-22-2015, 12:56 PM
Well, he's a bitter nobody for sure but, I'm not convinced he's smart enough.

DDOS attacks don't require any brains or skills.

Tisket
01-22-2015, 12:58 PM
Then put him back on the list of suspects because he has neither.

Androidpk
01-22-2015, 01:07 PM
Then put him back on the list of suspects because he has neither.

There's an established list??

Buckwheet
01-22-2015, 01:11 PM
I want to know why we got DDOS'd.

Its because we script and endorse all sorts of things the officials hate!

caelric
01-22-2015, 01:11 PM
Yes. So far, the list is, apparently, Gibreficul and Inspire. Not a very long list.

Buckwheet
01-22-2015, 01:26 PM
Yes. So far, the list is, apparently, Gibreficul and Inspire. Not a very long list.

And its because of Tgo01.

Androidpk
01-22-2015, 01:33 PM
Tgo1 is suspect zero.

caelric
01-22-2015, 01:33 PM
Ooooh, got a poop rep because of my post. Haven't gotten one of those in a while.

Tisket
01-22-2015, 01:52 PM
There's an established list??

What makes a list "established"?

Androidpk
01-22-2015, 01:54 PM
What makes a list "established"?

A formal announcement.

Tisket
01-22-2015, 01:55 PM
I think Anticor did it.

He gets no love.

Tgo01
01-22-2015, 02:00 PM
And its because of Tgo01.

:(


Tgo1 is suspect zero.

:(

Fallen
01-22-2015, 02:03 PM
To people experiencing login issues, try logging in now with your existing password, and if that doesn't work then reset your password. If that still doesn't work write me another e-mail at kranar@hotmail.com and I can have your password reset.

Up and running as of now. Thanks again.

Buckwheet
01-22-2015, 03:24 PM
:(



:(

Its okay, you needed to be attributed to further nerfing of our GS enjoyment regardless if you were responsible or not, you mechanic abusing whore.

Tisket
01-23-2015, 01:33 PM
I thought we lost the PC again. Posted on Buckwheat's forum but repeated here since I was able to get in again:

No Thread specified. "If you followed a valid link, please notify the administrator"

Every thread I tried and I got that. Then, when I tried I got "this page has a redirect loop"

More hijinx from the DDOS troublemaker?

Androidpk
01-23-2015, 01:37 PM
I haven't noticed any hiccups today.

Tisket
01-23-2015, 01:41 PM
I also tried to click on my profile and it said that this user doesn't exist.

I DO TOO EXIST!!

lol

leifastagsweed
01-23-2015, 04:19 PM
I also tried to click on my profile and it said that this user doesn't exist.

I DO TOO EXIST!!

lol

You exist from where I am sitting. You are just fishing for visitor ticks to your page. It's cool. Now I can lurk around your art some more!

Tisket
01-23-2015, 04:43 PM
You exist from where I am sitting. You are just fishing for visitor ticks to your page. It's cool. Now I can lurk around your art some more!

You can bypass visiting my profile page entirely by going to the Community link at the top of this page and choosing the Album link in the dropdown menu. That only shows albums that have recent activity in them though. If you want older images you'll have to suck it up and click on my profile.

JackWhisper
02-01-2015, 01:28 PM
Holy crap that lag just now. Are we being DDoS'ed by Candor again?!

Gelston
02-01-2015, 01:55 PM
Holy crap that lag just now. Are we being DDoS'ed by Candor again?!

Yeah, it is going pretty slow for me too. Not quite enough to shut it all down this time though, knock on wood.

Buckwheet
06-03-2015, 10:55 PM
BOOOOOOOOOOOOOOOOOOOOOOOOOM

Gelston
06-03-2015, 11:04 PM
I blame Bruce Jenner

Androidpk
06-03-2015, 11:23 PM
I blame Bruce Jenner

ISIS

Tisket
06-04-2015, 03:32 AM
I think Kranar should make Buckwheat an admin. We need more than one apparently.

JackWhisper
06-04-2015, 03:42 AM
I think there should be several unbiased admins, if just for site security. Did we go through this entire thing without Kranar appearing even once?

Tisket
06-04-2015, 03:47 AM
I don't know. I just don't think the entire burden should rest solely on Kranar's and one admin's shoulders.

Kranar
06-04-2015, 03:48 AM
The point is taken, this is quite the failure on my part. At any rate, there will be some upgrades installed over the next week, including a new version of vBulletin and stuff to make viewing the PC easier on mobile apps.

Tisket
06-04-2015, 03:49 AM
And I nominated Buckwheat because I think most people trust him and we know he has the technical skills.

Tisket
06-04-2015, 03:50 AM
Didn't realize he'd locked you out. hahaha, sorry but really, that's funny. I thought it was just people joking when it was mentioned before.

Kranar
06-04-2015, 03:51 AM
Nope, wasn't a joke, but it's in the past now.

Tisket
06-04-2015, 03:52 AM
Well, I don't have any other suggestions. I don't think anyone in their right mind would want to be admin and those that might want it aren't people the rest of us would want as an admin.

JackWhisper
06-04-2015, 03:54 AM
I am with Tisket. I wasn't trying to imply it was your fault. I figured if someone had hacked you, you'd been locked out of your own account and couldn't fix the problems.

Another admin or two, or hell, even another admin account or two controlled by you and used in these emergencies, *with ways to contact you outside PC of course* would be useful, I'd think?

Just a suggestion.

JackWhisper
06-04-2015, 03:55 AM
I blame Caitlyn Jenner

FTFY.

Kranar
06-04-2015, 03:59 AM
I wouldn't be surprised if the person who hacked the forums is the same one subjecting the site to DDOS attacks, which even to this day keep happening.

Whoever it is seems to be getting more and more desperate. I continue to maintain the anti-DDOS proxies to mitigate that issue and have no plan to turn it off in the near future, as for gaining access to the forums, it's possible it was done through a vBulletin exploit. The issue is in the past when the hosting provider attempted to upgrade vBulletin to the latest 4.xx, it always fails for some reason, and several attempts have been made. So the solution for this incident is to upgrade to vBulletin 5 which is being scheduled.

But who knows what other tricks this person has up their sleeves. They do seem pretty committed and rather dedicated given that they continue to try to DDOS the site even with the proxy enabled.

Androidpk
06-04-2015, 04:01 AM
How about Tillmen for admin?

Tisket
06-04-2015, 04:10 AM
I think Tillmen would be a good admin actually and probably more acceptable to other posters than anyone else who is a current member.

JackWhisper
06-04-2015, 04:18 AM
I wouldn't be surprised if the person who hacked the forums is the same one subjecting the site to DDOS attacks, which even to this day keep happening.

Whoever it is seems to be getting more and more desperate. I continue to maintain the anti-DDOS proxies to mitigate that issue and have no plan to turn it off in the near future, as for gaining access to the forums, it's possible it was done through a vBulletin exploit. The issue is in the past when the hosting provider attempted to upgrade vBulletin to the latest 4.xx, it always fails for some reason, and several attempts have been made. So the solution for this incident is to upgrade to vBulletin 5 which is being scheduled.

But who knows what other tricks this person has up their sleeves. They do seem pretty committed and rather dedicated given that they continue to try to DDOS the site even with the proxy enabled.

So..... what you're saying is....

Candor is the hacker?

Nieninque
06-04-2015, 05:00 AM
Bunch of fucking nerds

Fallen
06-04-2015, 08:26 AM
Could someone summarize what exactly happened? I missed the disturbance other than Tapatalk not being able to load the website for a bit last night.

Gelston
06-04-2015, 08:33 AM
Could someone summarize what exactly happened? I missed the disturbance other than Tapatalk not being able to load the website for a bit last night.

Someone got admin access and put up banner ads and shit. Then they put up the one that locks content until you do surveys and shit. It was removed once for about 5 minutes and then came back, then the website went into maintenance.

Androidpk
06-04-2015, 08:35 AM
Vbulletin 5 incoming.

Fallen
06-04-2015, 08:38 AM
Someone got admin access and put up banner ads and shit. Then they put up the one that locks content until you do surveys and shit. It was removed once for about 5 minutes and then came back, then the website went into maintenance.

Heh. That's a fairly tame hack, but i'm glad it's going to lead to more security in the future.

Gelston
06-04-2015, 08:39 AM
Heh. That's a fairly tame hack, but i'm glad it's going to lead to more security in the future.

They deleted a few threads too. Mostly seemed to be deleting Tgo and Jack Whisper posts.

WRoss
06-04-2015, 08:53 AM
They deleted a few threads too. Mostly seemed to be deleting Tgo and Jack Whisper posts.

I made a group to discuss the difference of banners and pennants. It was promptly deleted.

Taernath
06-04-2015, 08:56 AM
Is this STILL going on?

Androidpk
06-04-2015, 08:57 AM
No.

Gelston
06-04-2015, 09:06 AM
So, I'm guessing someone is back to trying to fuck with the forums again.

Taernath
06-04-2015, 09:21 AM
So, I'm guessing someone is back to trying to fuck with the forums again.

http://share.gifyoutube.com/yAO0ax.gif

Gelston
06-04-2015, 09:22 AM
http://share.gifyoutube.com/yAO0ax.gif

WTF, there is a "blog this post" button on here now? Bottom left corner.

Androidpk
06-04-2015, 09:26 AM
So, I'm guessing someone is back to trying to fuck with the forums again.

Kranar said the attempts haven't really stopped to begin with.

Parkbandit
06-04-2015, 09:49 AM
WTF, there is a "blog this post" button on here now? Bottom left corner.

I just tried it.. must be part of the vBulletin upgrade. It puts it on your individual blog page.

Stupid.

Some Rogue
06-04-2015, 01:36 PM
I just tried it.. must be part of the vBulletin upgrade. It puts it on your individual blog page.

Stupid.

This is going in my blog!

Parkbandit
06-07-2015, 10:21 PM
7467

Archigeek
06-08-2015, 12:50 AM
This whole business sucks ass. I am pretty sure whomever is behind all this isn't just some nameless faceless entity, but is someone who is known to the PC. If they were, they wouldn't have been so quick to delete threads etc. It clearly seemed personal.

Also, when I'm at the main page for the PC, the name of the page now includes the phrase, "change your email kranar".

Fallen
06-08-2015, 12:58 AM
Tapatalk seems to be working fine.

Androidpk
06-08-2015, 12:58 AM
Does seem personal.

SHAFT
06-08-2015, 12:59 AM
Yeah, the PC is now the "change your email kranar". Makes sense.

Thanks for the advice mr/mrs hacker person! You're doing great work!

AnticorRifling
06-12-2015, 04:11 PM
Apparently I got demoted during all the fun goings on, neat!

Astray
06-12-2015, 04:14 PM
Now is the time for Anarchy! Burn it all down man!

Gelston
06-12-2015, 04:23 PM
ANTICOR WAS THE ONE DOING IT. BUSTED.

Buckwheet
06-12-2015, 04:34 PM
Does seem pretty personal. I don't think anyone has been banned in long time so who knows where its coming from. I do find it odd though that they targeted all things GS for a while. Lich, here, and the game were all hit at the same time.

Wonder if its his ex girlfriend or something?! We better backtrace it.

Kranar
06-12-2015, 04:38 PM
Quite likely personal, don't really know... whoever it was was also using the site to run a phishing scam too. Sneaky sneaky.

Tisket
06-12-2015, 04:39 PM
Apparently I got demoted during all the fun goings on, neat!

Hacker cunt was busy.

AnticorRifling
06-12-2015, 04:54 PM
Does seem pretty personal. I don't think anyone has been banned in long time so who knows where its coming from. I do find it odd though that they targeted all things GS for a while. Lich, here, and the game were all hit at the same time.

Wonder if its his ex girlfriend or something?! We better backtrace it.

I don't think I've banned anyone in quite a few months, bots not included.

Androidpk
06-12-2015, 05:07 PM
Anticor's snubbed dodge charger is out for revenge.

Latrinsorm
06-12-2015, 07:30 PM
Who do I have to universally surveil to get this backtraced already?

subzero
06-12-2015, 08:22 PM
Who do I have to universally surveil to get this backtraced already?

The universe.

Latrinsorm
06-13-2015, 11:25 AM
Challenge accepted.

AestheticDeath
06-18-2015, 02:21 AM
Is there a timeline on whatever all has happened? I don't come here much anymore, but I saw this thread started around January, Tillmen posted the need for https end of May, and then beginning of June, seemingly something happened again? Besides the constant(?) DDoS.

Gelston
06-18-2015, 02:57 AM
Is there a timeline on whatever all has happened? I don't come here much anymore, but I saw this thread started around January, Tillmen posted the need for https end of May, and then beginning of June, seemingly something happened again? Besides the constant(?) DDoS.

Shit sucked. Got fixed. Shit sucked. Got fixed. Now.

Latrinsorm
06-18-2015, 07:34 PM
time is a flat circle, alright? not a line.