Printable Version of Topic

Posted by: SirAndy Jan 2 2021, 12:04 PM

We were the target of yet another DDoS attack over the past few days.
https://en.wikipedia.org/wiki/Denial-of-service_attack

The attacker(s) managed to bring the server down by draining it of all resources. I've been working with our hosting company on a more permanent solution since this has become a somewhat frequent occurrence.



Please let me know if there are any problems with the site, errors or other things not working properly.

Posted by: iankarr Jan 2 2021, 12:08 PM

Apparenty the russians are interested in whether a 205 tire will fit.

Thanks for protecting us, Andy! Really appreciate everything you do.

Posted by: JeffBowlsby Jan 2 2021, 12:15 PM

You are the best Andy. Thanks for all you do.

Posted by: SKL1 Jan 2 2021, 12:22 PM

Wondered why it wouldn't load for a day or so... was having withdrawal symptoms!

Posted by: MM1 Jan 2 2021, 12:24 PM

Thank you, Andy.

Life is less enjoyable when 914World is down - a positive testament (or indication of addiction/obsession ).

May the perpetrators feel the wrath of the evils they sow.

But let’s appease them this once: yes, 205’s always fit-especially if you buy them by the shipload. Get a couple tankers full and we’ll buy some if you give us a good deal. . .remember, this is 914World, not BugattiWorld.

Posted by: Unobtanium-inc Jan 2 2021, 12:26 PM

I just want to know when I'm getting my 1,000,0000,000 dollars when I answered the email. Anybody?

Posted by: MM1 Jan 2 2021, 12:29 PM

If they don’t have your bank account for direct deposit, you’ll have to wait for the check to arrive in the mail (USPS is a bit slow now, see other posts).

Posted by: Superhawk996 Jan 2 2021, 12:38 PM

Thanks to SirAndy for getting site back up & running!

Posted by: ndfrigi Jan 2 2021, 12:39 PM

Thank you so much Andy! Have a blessed 2021!

Posted by: bbrock Jan 2 2021, 12:40 PM

Thanks Andy! When I couldn't access the site yesterday I just kept think how shitty it was that you had to deal with this on New Year's Day. I've managed servers in past jobs and know how frustrating this kind of crap is.

In fact, you may get a kick out of this. My first week as the new information manager for the ecology department at a major University, somebody hacked our mail server and started distributing porn with our email domain! That was fun

Posted by: Amphicar770 Jan 2 2021, 12:44 PM

Thank you Andy.

I run the Amphicar forums and have had to set up multiple layers of defense. It is amazing the number of spammers and other a-holes who try to wreak havoc on a daily basis. It is one reason why there are fewer and fewer forums. Keeping up is costly and time consuming.

Posted by: ValcoOscar Jan 2 2021, 12:46 PM

Thank you Andy

We appreciate EVERYTHING you do to keep us up.

My wife was starting to wonder why I was talkative.

Oscar

Posted by: MM1 Jan 2 2021, 12:52 PM

Phew! That is bad sign, Oscar - at least for me it is

Posted by: andys Jan 2 2021, 12:55 PM

Andy, Thank you for your effort and hard work to keep us going.
Andys

Posted by: 914werke Jan 2 2021, 12:58 PM

You are appreciated for all you do for us afflicted with the sickness Andy!

Posted by: rhodyguy Jan 2 2021, 01:00 PM

Posted by: 914_7T3 Jan 2 2021, 01:04 PM

Great job @http://www.914world.com/bbs2/index.php?showuser=179

However, I think they are really after @http://www.914world.com/bbs2/index.php?showuser=18749 's Bumblebee restoration Videos

Posted by: Camaro Mike Jan 2 2021, 01:07 PM

Yes, thank you for everything you do @http://www.914world.com/bbs2/index.php?showuser=179

Posted by: Lucky9146 Jan 2 2021, 01:43 PM

Thank you Andy for for all you do and have to do in this case.

Had no idea how addicted I was to the site till I couldn't get in!
I was starting to go into with drawl I think

Posted by: Carbon-14 Jan 2 2021, 02:55 PM

https://eos.com/gallery/satellite-image-of-san-francisco-usa/

Posted by: Cairo94507 Jan 2 2021, 02:59 PM

Thanks a bunch Andy. I knew you would be all over it. I wish we could zap these asshats.

Posted by: 76-914 Jan 2 2021, 03:34 PM

Those Fucher's changed your avatar Andy.

Posted by: mgp4591 Jan 2 2021, 04:05 PM

It was a rough couple of days without my usual fix...I hope they didn't get anything sensitive in the process. Thanks for getting us up and running in short order!

Posted by: SirAndy Jan 2 2021, 04:14 PM

https://en.wikipedia.org/wiki/Denial-of-service_attack

Nobody "hacked" the server, that's not what they were after ...

Posted by: r_towle Jan 2 2021, 10:08 PM

Thank you! @http://www.914world.com/bbs2/index.php?showuser=179

Posted by: mgp4591 Jan 2 2021, 10:56 PM

Great to know you're helping us maintain our virginity! Thank you Sir!

Posted by: djway Jan 2 2021, 11:17 PM

I'm just glad I was not the only one seeing that.

Just because I am paranoid doesn't mean someone isn't following me....

Posted by: drem914 Jan 3 2021, 12:22 AM

All the more reason we should be supporting the site and help @http://www.914world.com/bbs2/index.php?showuser=179 out with keeping the front door open.
http://www.914world.com/bbs2/index.php?act=paysubs&CODE=index
If you can and haven't yet, please do.

Posted by: VegasRacer Jan 3 2021, 12:49 AM

Thanks for saving us, again, Sir Andy.

Posted by: wonkipop Jan 3 2021, 01:52 AM

chinese?

training their youth for cyber war on the west?

we are feeling their hate down here.
banned our wine.
banned our coal.
banned our barley.
etc.
all since christmas.


because we backed WHO looking into the origins of CoVid?

Posted by: nathanxnathan Jan 3 2021, 01:56 AM

With all the hacker issues 914world has had over the years, I've often wondered why it's still "not secure" like it won't load as https:, and says not secure in my browser. -no ssl certificate.

I'm not sure if that would help this specific kind of attack.

One thing it does cause that seems odd is when Chrome browser puts it up on the homepage of frequently viewed sites, it won't click through because it defaults to https and https://www.914world.com oddly doesn't go to the site - it doesn't even redirect.

Posted by: SirAndy Jan 3 2021, 02:17 AM

HTTPS does not make the site any more "secure", all it means is that the data is encrypted on the way from the site to your computer.

And since we're not dealing with sensitive information, unlike your bank for example, i don't see any reason to pay for a SSL certificate.

It literally does *nothing* to make the site less vulnerable to any of these attacks.

Posted by: rgalla9146 Jan 3 2021, 07:31 AM

Andy you are an essential worker.
For all of us.
Thank you.

Posted by: SirAndy Feb 14 2025, 11:16 AM

And here we are again, a distributed DDoS attack that started last night.

Lets see if i can hold them back this time.

Posted by: SirAndy Feb 14 2025, 11:19 AM

Attached image(s)

Posted by: FlacaProductions Feb 14 2025, 11:21 AM

Thanks for bringing it back.....

Posted by: NARP74 Feb 14 2025, 11:32 AM

If only we could monetize that DDoS!

Posted by: technicalninja Feb 14 2025, 11:52 AM

@http://www.914world.com/bbs2/index.php?showuser=179

What is the purpose of a DDoS attack on a site like this?

Looks like work with no gain to me.

Why is it worth their time to jack up a niche site?

Posted by: NARP74 Feb 14 2025, 11:55 AM

Jilted scammer, competition, evil people, fat fingered information by a script kiddie, AI gone wrong, who knows...

Posted by: ClayPerrine Feb 14 2025, 11:55 AM

Most of the time it's script kiddies. They are hacker wannabes that get their jollies jacking up sites. There is no monetary gain to be had here, so real hackers won't bother us.

Posted by: SirAndy Feb 14 2025, 11:58 AM

My guess is they are probably doing a test run for some major attack on some valuable targets.
These are quite literally distributed attacks from thousands of hacked computers all around the world.

They're probably doing these tests to make sure they still have control over those computers before launching the real attack.

Posted by: emerygt350 Feb 14 2025, 12:08 PM

My college got hit yesterday and this morning as well. They ended up blocking several countries in order to stop it.

After 24 years I finally updated my servers to ssl last week, solely because many browsers do their best to not allow you to see old http no matter how non-sensitive the content. I get free certificates from the EFF and use the certbot to update the ssl certs automatically. I was surprised at how easy it all was. Pretty much four lines of instructions and that was done. This was on linux and apache2.

As far as the bad guys... I use a perl script to watch requests in the auth_log and when I cared the access.log for apache2. Somebody asks for something stupid I would block them from all ports in iptables. I don't really care about idiots on the webserver so I don't bother with it now but if they try to log in on ssh I block them from everything.

Even that won't protect you from ddos of course but at least it makes me feel good. I free them after a few days to keep the iptables sane.

Posted by: technicalninja Feb 14 2025, 12:10 PM

Thank you for the reply.

Also THANK YOU for being our defense!

Seems silly IMO to target such a site as 914world.

Like mugging an 85-year-old woman!

Posted by: ClayPerrine Feb 14 2025, 12:12 PM

I actually prefer to firewall off the outside world, only allowing HTTP and HTTPS to the server. Then forcibly redirect the HTTP to HTTPS. Any SSH access comes in from the internal network.

Posted by: SirAndy Feb 14 2025, 12:17 PM

The problem with the IP based approach is that they have hundreds of thousands of different computers at their disposal. Each one having a different source IP. And that's before taking IP spoofing into account.

For example, last nights attack came from about 280,000 unique IPs.
Not sure your iptable would be able to handle that.

I've given up on IP based rejection or filtering a long time ago and moved on to other measures.

The one last night did catch me by surprise though as they have been changing their tactics lately.

Posted by: Shivers Feb 14 2025, 12:20 PM

This may be a silly question Andy, but why would they do this to you? Because they can?

Posted by: SirAndy Feb 14 2025, 12:22 PM

Answered above:
http://www.914world.com/bbs2/index.php?s=&showtopic=350822&view=findpost&p=3191875

Posted by: ClayPerrine Feb 14 2025, 12:24 PM

Keeping hackers, spammers and script kiddies out of any IT system is like playing whack-a-mole. You legally cannot attack. All you can do is play defense and kill their attack when it pops up. If the government would allow us to make retaliatory attacks and actually go after them on their home systems without us get prosecuted, it would deter the hackers from a lot of their attacks.

But we are the good guys, so we can't.

Posted by: technicalninja Feb 14 2025, 12:42 PM

This is disturbing...

The internet COULD be more secure if it was "fair".

This is something that should be looked into.

In a modern country the weakest link IS the Internet.

Take it out and chaos would result.

It SHOULD have oversite from an organization that can use ANYTHING to promote stability.

Setting up that organization might be difficult.

Posted by: SirAndy Feb 14 2025, 12:46 PM

LoL and who would you trust to decide what "fair" means?

Hitting them back isn't an easy task by any means.
The days of script kiddies doing this in their parents basements are long gone.
Today, these attacks are run by organized crime and governments (sometimes one and the same).

And just to reiterate my point above, the computers these attacks come from belong to ordinary people who have no clue their computer/device is even hacked.

So you can't go after the individual sources of the attacks. You have to find who is controlling them. And that part is exceedingly difficult.

Posted by: SirAndy Feb 14 2025, 01:12 PM

And they are back ...

Posted by: emerygt350 Feb 14 2025, 03:26 PM

Yeah, ip level is tough. At one point I was blocking whole blocks. I can't keep ssh internal only but having 23 and 443 as the only ports help.

I remember back in the past century trying stuff like sending back Christmas tree scans on attacking ips but nowadays there is nobody home to care if your prey is trying to fight back. What are you going to do? Crack 250000 computers?

Posted by: ClayPerrine Feb 15 2025, 05:49 AM

The trick would be taking over one of the attacking machines and using that to find the control computer. Then go after it.

Posted by: JamesM Feb 15 2025, 02:45 PM

What is your favorite flavor of kool-aid? Hopefully the one you have been getting served.

Seriously though as someone who has spent the last 30 years in tech including for major internet and streaming providers, what you are bringing up is money driven politics. Unfortunately though, from a technical standpoint, giving huge monopolistic companies the ability to throttle traffic of their competitors would do very little to increase anyone's site security no matter how much Fox News and Newsmax say otherwise.

Posted by: SirAndy Feb 15 2025, 05:38 PM

We're still being attacked ...


I'm going to take the site offline for a while and try something that hopefully will solve some of our crashing issues.

Fingers crossed i won't break anything.

Posted by: SirAndy Feb 15 2025, 06:17 PM

Anyone having any weird issues with the site?


Seems to be working OK for now.

Posted by: windforfun Feb 15 2025, 06:58 PM

Is my PC going to get hijacked?

Posted by: SirAndy Feb 15 2025, 07:00 PM

Posted by: mgp4591 Feb 15 2025, 07:10 PM

If that's what needs to be done, shut er down for a bit. Any idea when or how long? It's not a big deal so whenever you need to.
Thanks for keeping us as safe as you can!

Posted by: SirAndy Feb 15 2025, 07:15 PM

Already done ...
Waiting for the next attack to see if it makes a difference.

I think i'm going to pour myself some medicinal Jägermeister.

Posted by: windforfun Feb 15 2025, 07:20 PM

Great idea. Three for me.



So I suppose something like a VPN would be superfluous?

Posted by: SirAndy Feb 15 2025, 07:31 PM

VPNs don't work for servers.

Posted by: windforfun Feb 15 2025, 08:20 PM

What if they did?

Posted by: SirAndy Feb 15 2025, 08:35 PM

You would have to make the server private and take it off the internet.

Kinda defeats the purpose of a public forum, doesn't it?

Posted by: SirAndy Feb 16 2025, 10:18 AM

Looks like we survived another round of attacks over night without a server crash.

Posted by: Dion Feb 16 2025, 12:41 PM

Thanks SirAndy for keeping us alive!

Posted by: Cairo94507 Feb 16 2025, 12:49 PM

Thank you @http://www.914world.com/bbs2/index.php?showuser=179 .

Posted by: worn Feb 16 2025, 08:43 PM

Thanks Andy. I suppose we could cut off the world server from the public and then mail in questions to Andy on post cards. Andy would then ask people for answers which he would then make public. And then Andy would leap out of the wooden Trojan horse and attack….

Posted by: SirAndy Feb 16 2025, 08:50 PM

I've seen that movie!

Posted by: mgp4591 Feb 17 2025, 12:09 AM

Medicinal Jaeger shots all around!

Posted by: ClayPerrine Feb 17 2025, 10:58 AM

Andy's mailman would hate us.

Posted by: Jeff_72 Feb 17 2025, 11:44 AM

@SirAndy

I have experience with mitigating DDOS attacks.

What kind of firewall does the server sit behind?

Is it owned by 914world, or is it ISP provided?

Happy to discuss this offline.

Posted by: SirAndy Mar 10 2025, 05:25 PM

Looks like i called it. The attack on our server has been going on for a month and peaked yesterday just in time for the attack on X (Twitter).

Posted by: technicalninja Mar 10 2025, 05:38 PM

Have the attacks on 914World diminished since the start of the X attacks?

That would be interesting...

Posted by: SirAndy Mar 10 2025, 05:46 PM

As of right now, they're still going, albeit at about half of the peak level.

As mentioned in the article referenced above, the attacks on our server come in at waves, sometimes as frequent as every 15 minutes, sometimes with several hours in-between.

Posted by: mate914 Mar 10 2025, 06:41 PM

Can we strike back? Joking... Any idea who? Still kinda joking...
Matt

Posted by: ClayPerrine Mar 11 2025, 06:16 AM

Matt,

It is against US federal law to "strike back". That takes us to the same level as the attackers. So all we can do is play defense and try to mitigate the attack effects.

However, I know some international companies with deep pockets that finance offshore teams of hackers to strike back at their attackers. But it is done through shell companies to insulate the parent company from legal ramifications. 914world is a nonprofit so we don't have money for something like that. And honestly, much as I love this site, I am not willing to go to prison for it.

Posted by: mate914 Mar 11 2025, 06:29 AM

Thats for the info. I was joking.
Matt

Posted by: SirAndy Apr 4 2025, 02:58 PM

Happening again all day today.

Everything is sloooooow but stable otherwise.

Posted by: bkrantz Apr 4 2025, 07:29 PM

The world is full of rotten idiots.

Andy, thanks for keeping us going.

Posted by: GBX0073 Apr 5 2025, 10:18 AM

Andy
Appreciate everything you do to keep us running
Thank you

Posted by: SirAndy Jun 6 2025, 09:49 AM

Happening again for the last few days ...

Posted by: Root_Werks Jun 6 2025, 02:09 PM

Shocking that some people have nothing else better or more productive to do.

Posted by: SirAndy Oct 21 2025, 02:13 PM

Here we go again ...

Posted by: Root_Werks Oct 22 2025, 02:48 PM

Haven't noticed any issues a accessing anything. Hopefully this attack passes without in incident.

Posted by: SirAndy Dec 30 2025, 08:17 PM

And here we go again ...

Posted by: sixnotfour Dec 30 2025, 09:16 PM

Posted by: dtmehall Dec 30 2025, 09:32 PM

must be a Mustang-e owner!

Posted by: GregAmy Dec 31 2025, 08:26 AM

Yup, she's a big sluggish...but still accessible...for now...

"13371 User(s) are browsing this forum (13353 Guests and 1 Anonymous Users)
17 Members"

Posted by: SirAndy Dec 31 2025, 09:47 AM

It was over 60000 when i posted last night.

Posted by: GregAmy Feb 14 2026, 02:47 PM

They're baaaaack...

Posted by: SirAndy Feb 14 2026, 05:14 PM

Posted by: SirAndy Feb 14 2026, 10:35 PM

Ok, we should be good for a while until they figure out what i did to block them.

Posted by: Krieger Feb 14 2026, 11:44 PM

Andy, you rock!

Posted by: StarBear Feb 15 2026, 07:45 AM

Posted by: mepstein Feb 15 2026, 08:56 AM

Thank you!

Posted by: sixaddict Feb 15 2026, 09:27 AM

Posted by: krazykonrad Feb 15 2026, 09:30 AM

Vielen dank!

Posted by: 76-914 Feb 15 2026, 11:16 AM

Posted by: Flyinlow Feb 15 2026, 03:14 PM

I thanks

Posted by: bkrantz Feb 15 2026, 08:07 PM

I still have a fantasy that someday we can send a reverse signal to the idiots who start this and make their computers and phones explode.

Posted by: TRP Feb 15 2026, 08:32 PM

I'm still new here, what the theory behind why these people are targeting our little corner of the web? Just random attacks from bored miscreants?

Posted by: wonkipop Feb 16 2026, 04:49 AM

the answer to your question is simple.
there has never been a shortage of arseholes in the world.

Posted by: wonkipop Feb 16 2026, 04:52 AM

i share your fantasy. a technological mirror would be a fit weapon.
mossad could probably sell us the tech but it won't be cheap.
but it would be effective.

Posted by: Artfrombama Feb 16 2026, 08:50 AM

I believe the best response would be no response

Posted by: GregAmy Feb 17 2026, 01:12 PM

I think they figured it out...

Posted by: friethmiller Feb 17 2026, 02:21 PM

This sucks!

Posted by: chmillman Feb 17 2026, 02:41 PM

Yep…

Posted by: 930cabman Feb 17 2026, 02:49 PM

have wondered the same, must be plenty of idiots with nothing but time on their hands?????

pile of

Posted by: sixnotfour Feb 17 2026, 03:19 PM

Posted by: SirAndy Feb 17 2026, 08:16 PM

Playing catch-up

Posted by: GregAmy Feb 17 2026, 09:05 PM

Ok, while not what was intended, I still laughed...

Posted by: 930cabman Feb 18 2026, 06:03 AM

thanks for getting us back up and running all involved

Posted by: Biggles Feb 18 2026, 06:58 AM

Tried sending a PM message to someone and it doesn't work. Can this be looked at please ?
Thanks

Posted by: rfinegan Feb 20 2026, 09:55 AM

Cannot upload images to post, been getting errors since slow performance attack...Related?

Posted by: rfinegan Feb 21 2026, 08:19 AM

thanks working now

Posted by: SirAndy Mar 1 2026, 01:45 PM

If you're experiencing login/posting issues today, that's just me trying to keep up with our attackers.

Posted by: chmillman Mar 1 2026, 02:01 PM

Everything seems OK here so far. Note since the latest series of attacks a few weeks ago, 914World has been inaccessible for me via Safari on my iPad and iPhone. However, no problem accessing via Google Chrome on the same devices. Don’t know if anyone else is experiencing the same problem.

Posted by: GregAmy Mar 1 2026, 02:08 PM

Ugh, over 1300 "guests" as I type this...but no noticeable performance challenges.

Posted by: SirAndy Mar 1 2026, 02:26 PM

Already up to:
5555 guests, 42 members 3 anonymous members

I've been pretty successful in keeping them at bay in the last few weeks. Lets hope they don't figure out what i've been up to.

Posted by: SirAndy Apr 4 2026, 02:40 PM

Happening again ...

Posted by: mepstein Apr 4 2026, 02:58 PM

Kick their ass.

Thank you.

Posted by: TRP Apr 4 2026, 09:04 PM

Hello @http://www.914world.com/bbs2/index.php?showuser=179 ,

What does cloudfare pro run for a years subscription? I thibk its based on traffic volume. Shoot me a PM, I would like to help fix this for the site. I will send you a PM.

Ted

Posted by: SirAndy Apr 5 2026, 10:44 AM

Attached image(s)

Posted by: JeffBowlsby Apr 5 2026, 01:54 PM

Well hey, look on the bright side. 914World.com is the most popular 914 Porsche forum on the net!

Posted by: SirAndy Apr 11 2026, 10:00 AM

Attached image(s)

Posted by: JamesM Apr 11 2026, 11:57 AM

Was wondering what the slow down was last week.


I can't help but wonder why on earth 914world would be the target of anyone DDoS'ing

Posted by: GregAmy Jun 10 2026, 07:30 AM

They're baaaaaaack....!

Posted by: 76-914 Jun 10 2026, 07:39 AM

I thought so. The past few days it has taken an inordinate amount of time to open 914world. Yesterday it sped up after awhile. Makes me wonder how people like this see themselves. I view them as little people that couldn't find a friend in a large room packed with people. Add to that; short dick syndrome.

Posted by: SirAndy Aug 13 2026, 07:11 PM

Attached image(s)

Posted by: VaccaRabite Aug 14 2026, 10:38 AM

We are really, REALLY popular! ;->

Zach

Posted by: emerygt350 Aug 14 2026, 04:18 PM

I know you are probably doing this already but if not I would just start blocking all of Russia, asia, and eastern Europe. Nothing like putting stuff like 195.0.0.0 in the old iptables. Probably too many compromised systems in the west to help anymore I guess.

Posted by: SirAndy Aug 14 2026, 04:52 PM

They are using VPNs these days, in our case especially ones that have endpoints in the US.

IP blocking has lost most of its original use.

Posted by: windforfun Aug 14 2026, 06:46 PM

Why is this the only website that I use that has this problem?

Posted by: L-Jet914 Aug 16 2026, 06:48 PM

I don't know why someone would want to DDOS this website. I wonder if it's easier to do so with the site not being an https website? Though IT is not my wheelhouse. Looking forward to the person/people doing this to be done and move on to something more productive.

Posted by: bkrantz Aug 16 2026, 08:03 PM

Maybe a dumb question, but what happens if you disconnect all guests?

Posted by: worn Aug 16 2026, 08:16 PM

Thanks Sir Andy.

Posted by: adolimpio Aug 16 2026, 11:03 PM

Something seems strange. The home page itself is only 4.4k and it takes over 20 seconds to load. Once it is loaded the rest of the content loads instantly. For example, the largest object is the car of the month picture at 61.2kb and it takes only 528ms to load. Is there that much server time required to construct the home page?

I assume the attacks are all port 80? Are they always hitting the home page or some deep links?

Posted by: Jack Standz Aug 17 2026, 12:48 AM

First of all, we really appreciate all the admin. Really.

However, we want to ask the question: What or who did administration piss off? Again: What or who did administration piss off?

Anyone have any ideas?? This is not normal. Period.

It would be awesome if we could someday return to "normal". How does that happen? What do we need to do and how can we help?

Thanks all!!

Posted by: 76-914 Aug 17 2026, 06:54 AM

You beat me to it Bob. Only I would have prefaced "I don't know squat about computers but......". See ya in 3 weeks.

Posted by: adolimpio Aug 17 2026, 07:22 AM

Most of these bots are not very sophisticated, many do not process JavaScript.

If we created a landing page with a small JavaScript script that forwards the visitor to the home page, any visitor that does not process JavaScript will just be dropped.

I could put a test page on my server if you'd like to try it.

Thoughts?

Posted by: SKL1 Aug 17 2026, 11:09 AM

Is this due to some pissed off 19 year old living in his parent's basement???

It is slow as molasses this morning unfortunately... I'd be happy to pay a little more in the membership to help alleviate this problem...

Posted by: SirAndy Aug 17 2026, 01:11 PM

They don't hit the home page, a large portion hits the garage url directly while the rest hit more or less random threads since unfortunately the forum software was written to use sequential numbers for thread id's so it's really easy to just randomize that during an attack.

They don't need to "navigate" the site, they just need to send as many requests as possible to legit url's on the site in order to bog down our server and preventing it from serving web pages to legit users.

Hence the phrase "Denial of Service" attack ...

Posted by: SirAndy Aug 17 2026, 01:13 PM

92619 guests




PS: And no, turning off "guest" access is not really an option. We do want legit guests to be able to browse the forums. Besides, then the attacker would simply target the member login page. There's nothing to be gained by disabling guest access.

Posted by: 930cabman Aug 17 2026, 01:15 PM

It's back to it's speedy self, thanks Andy

Posted by: SirAndy Aug 17 2026, 01:30 PM

Won't last. It's a perpetual loop of them finding new VPN endpoints and me blocking those.

Posted by: 930cabman Aug 17 2026, 04:59 PM

what is the matter with "them?"

nothing else to do but disrupt others lives? I just don't get it

Posted by: Puebloswatcop Aug 17 2026, 05:02 PM

whatever was done today, its finally up to speed. I am lost without my 914 world time.
Thank you guys so much for taking care of all of us 914 junkies. I know I really appreciate all the time you guys spend, making this site possible

THANKS

Posted by: sixnotfour Aug 17 2026, 05:11 PM

Good Work Andy,
It really was bad earlier trying to post some pictures.. But I was Patient..

Posted by: Cairo94507 Aug 17 2026, 05:21 PM

Indeed; thank you Andy. I have been missing this place.

Posted by: Shivers Aug 17 2026, 05:35 PM

Thank you Sir

Posted by: Flyinlow Aug 17 2026, 07:57 PM

Thanks man going crazy not being able to ask questions

Posted by: 76-914 Aug 17 2026, 10:11 PM

!st, thank you Andy. 2nd, what's the fix? There has to be a work around and what is the price. You have several members here who would be willing to kick in some cash if that would take care of this once and for all. Ukraine is kicking Russia's ass. I believe you can kick these jerks ass as well. Give us an estimate to rid us of these booger picking maggots so we can pass the hat, so to speak.. TIA, Kent

Posted by: rudedude Aug 18 2026, 09:39 AM

Thank you Andy for getting us back to speed. I hope it lasts.

Posted by: burton73 Aug 18 2026, 02:38 PM

I am with Kent and all my other 914 and P car brothers.
I have said a few times that I am willing to help kick in some money, but how to fix this is way above my skill set. I thought Clay was on to something or am I wrong?
Been here for 20 years. 914World.com has been a part of my life no matter where I was in the world If there was an internet connection. Sometimes challenging back before wireless connection in Mainland China hotels

Best Bob B

Posted by: Shivers Aug 18 2026, 03:38 PM

Maybe if you change it to Yugo-world, they'd take pity and move on.

Posted by: friethmiller Aug 18 2026, 03:48 PM

How about accounts only? Just curious.

Posted by: 930cabman Aug 18 2026, 04:07 PM

gets my vote

Posted by: worn Aug 18 2026, 05:54 PM

To quote Gene Wilder- “They are jealous!”

Posted by: mgp4591 Aug 18 2026, 10:35 PM

Strange...I can't connect unless I use my VPN...

Posted by: didenpx Aug 19 2026, 07:53 AM

I can only connect by disabling my vpn. But glad it is back!

Posted by: Montreal914 Aug 19 2026, 08:00 AM

Thank you!!!

Posted by: SirAndy Aug 19 2026, 09:23 AM

Yeah, nothing is perfect. I had to ban some more VPN endpoints in the US as they were used to funnel massive amounts of traffic from Asia to our site.

Unfortunately, that might also block legit users that happen to be routed through the same endpoints, even if they aren't using a VPN themselves.

Posted by: 914Sixer Aug 19 2026, 08:38 PM

Yeah, all my stuff is Apple and I was getting a 403 error code. I am not using VPN.

Posted by: roundtwo Aug 19 2026, 09:50 PM

Thanks for fixing things ...

Was getting a 403 error code on my PC and apple phone ....couldn't figure out what was going on for a couple of days with the site.

Posted by: dax1969 Aug 21 2026, 06:58 AM

I still get the 403 error code on the laptop. Tried microsoft edge and google chrome but still no acces.

It works on my iphone….

Any ideas on settings ? Or are ip adresses outside the US blocked ?

Pls advise

Greetings
Dax
belgium

Posted by: SirAndy Aug 21 2026, 09:16 AM

@http://www.914world.com/bbs2/index.php?showuser=17103
Yeah, i had to block some large providers in Europe because the attacks also funnel through VPNs there.

We're still being attacked in force. If i remove those blocks, the site will become very slow again.

Posted by: mgarrison Aug 21 2026, 01:06 PM

Dang Andy, I wouldn't think we would be such a target but I've never been able to explain crazy HOOMANS!

Posted by: dax1969 Aug 24 2026, 03:02 AM

Thanks for the feedback. Have been searching all over the place as I thought it were my settings. A pity and hope to scroll this platform fm my laptop again soon. Iphone screen is too small for my 57 year old eyes

Posted by: SirAndy Sep 2 2026, 11:27 AM

Unblocking some of Europe right now. Going slow to monitor activity.

Unfortunately, there are a few VPN endpoints that need to stay blocked.
I still see a massive amount of traffic thrown our way.

Posted by: SirAndy Sep 10 2026, 12:31 PM

Still happening, i had to block two more US based VPN endpoints.



This latest attack has been ongoing for weeks now. I block them, they find other entry points. Rinse and repeat.

Posted by: TRP Sep 10 2026, 02:22 PM

Thanks for fighting the good fight. Much appreciated.

Ted

Posted by: GregAmy Sep 10 2026, 07:55 PM

Who did we piss off...?

Posted by: VaccaRabite Sep 11 2026, 07:50 AM

No one. We are likely on a list in some hacker kit due to the old board software. Or we just got picked up by someone crawling for exploitable webspace.

Zach

Posted by: SirAndy Sep 30 2026, 12:15 PM

Still happening ...

Posted by: 76-914 Oct 1 2026, 06:51 AM

Grateful for your presence and quick response Sir Andy.

Posted by: SirAndy Oct 10 2026, 02:12 PM

Just another weekly reminder that we're still under attack.

If the site feels slow and sluggish, you know who to thank.