Help! my forum DDoS attack

Chi tiết kỹ thuật

Forum version: #PunBB
Chức vụ: Người sáng lập
Trình duyệt có liên quan (s): Mozilla Firefox, Google Chrome
Ảnh chụp màn hình của vấn đề: http://www.upsieutoc.com/images/2016/06/25/ddoss.md.jpg
Ai là mối quan tâm vấn đề: Tất cả các thành viên
Diễn đàn liên kết: http://www.4rkinggame.com/

Mô tả vấn đề

Tôi phải làm gì để chống lại Ddos?
Làm ơn giúp tôi!
Cảm ơn!

Stop hiding man -"- i couldn't find your forum URL until I posted a reply here

EDIT : Nothing's wrong w your domain, still work for me

Hello,

Your forum seems okay.
Forumotion manages your server so the company (and its hosting provider) deals with possible DDoS attacks.

I was a member on the board threatened to DDoS my forum since deleted all of them, and then for hours in my forum "Maintenance in progress".

My forum will lose a member, if it occurs frequently

I have endured, watching this every 4 hours without anyone to help ...

p/s: sorry i not good English

@kenshin did one of the admins turn maintenance mode on? Please use forum utilities if you are the founder of the forum and log into your Admin Panel remotely through there. Then go to General>Configuration>Forum in Construction and if on yes tick 'no'>Click save and you should be done. I would also like to suggest swapping your password as this could provide more security for you.
Hope this helps otherwise you shall have to wait until someone else can answer you.
Regards,
Legionheart

Possibly due to DDoS attackers have stopped, but there is no guarantee that this will not continue in the future

My forum now becomes the attacker's game, they want my forum Maintenance in progress when they do ...

Hello,

I doubt what you experienced was caused by a DDoS . As daid earlier, your forum is on Forumotion's server, so that said, if someone were to DDoS your forum, they would have to DDoS the entire forumotion, if that happened, we would notice it because almost forum would be down and acting up. It is extremelly unlikely that what happened to your forum was caused by a DDoS .

What you experienced was maybe a temporary server issue or else simply an admin activating maintence mode as mentioned above. We recommend making sure you can really trust someone before you make them an admin on your forum.

-Brandon

Hi bradon_g

I was the sole founder of the forum, my forum is being threatened and 1 other DDoS attacks caused Maintenance Forum is in progress according to their wishes.
I assure her that I have only one account.

I do not know how they can attack my forum so,
They told me that 5 minutes of my forum will be suspended. True 5 minutes later my forum was inaccessible as they say, so we can say this is a DDoS attack
I confirm that I am under attack.

Average My forum only ~ 500 people online at the same time



and it does not stop

Hello,

It seems to be a maintenance in progress. Do you see the following error ?



If the problem persists, it may be a technical/database problem.

When do you notice the problem (always, while logging in, while posting) ?
When did the issue first appear ?

For your information, when there is a message about technical issues in your forums, you can check this guideline : https://help.forumotion.com/t144290-messages-about-technical-problems-on-forums

Hi Nemo

As I said, this is not the maintenance process.
My forum is being attacked

If your forum is under attack as you say, then I dont know why any other forums arent going down, as there are thousands of forums on a single server, if they attack your forum, then all the forums on that server should go down too... That is what does not make sense.

Even if your forum were under attack, I dont think there is anything we can do about it, as the servers are located in our main office in france, which is closed for the weekend and unless there is a major issue effecting a ton of forums on the service, which will require emergency intervention by our tech team to fix, there is really nothing more we volunteers can do for you until Monday, then maybe if the attacks still happen we can let someone in the head office know to look into it, but as it stands right now, while it appears your forum is the only effected, there is not much we can do.

-Brandon

If you feel that your forum is under attack, you can disable all the HTML pages and HTML codes because they do leave your forum vulnerable to malicious coding.

ACP(Admin Control Panel) > General > Messages and e-mails > Configuration > Messages > Allow HTML : No

You can also disable registrations made with the most common spam usernames : ACP(Admin Control Panel) > General > Forum > Security > Security Administration > Unauthorize subscriptions made with the most commonly used spam usernames. : Yes

If the problem persists, we will need to wait until Monday as Brandon said.

I do not know how they did, but the truth is they did my forum inoperable for nearly 20 hours over.
Certain measures must be taken to remedy this situation
Please help me!


Update: 

I just negotiate with the attackers and they have temporarily stopped the attack, but if forumotion easily attackers ddos so, how can I be assured that development forums.
They could strike again at any time

It is not that the attackers have attacked Forumotion's servers. It is that they have added some kind of coding to your forum that caused the issue. If they were to attack the servers, your forum would not be the only one affected. It could be in their signatures, in their posts, etc.

Hi SLGray

That is impossible because I have disabled html in the article, how they can activate the html code

and how can I chat forum has many ip extraordinarily strange to

Those IP's could be search engines.

This is not a normal thing everyday on my forum.
Average only ~ 400-500 IP online forum on me every day

The question is are these IP address exactly doing something? Do you allow guests to post in your forum?

No, only registered members can post in my forum.
Guests cannot do anything apart from watching the posts

Exactly is this issue causing you not to be able to log in?

Look at the amount of simultaneous IP access too much, so I guess they have to do ddos on ip access forum I can not log in

I have seen that many on my forum at different times, and nothing happened.

So how they crippled my forum during such a long time?
I do not use any heavy load js, causing many consume server resources.
Give me some examples of possible vulnerabilities to take advantage of the bad guys to attack my forum.
What could be causing one of forumotion forum, please help me to fix this together.

I still say that it was a member of your forum that did something that caused this. Did something happen right before this with any of your members?

I gave the forum the initial default (without any code change does, no member) but they can still attack ddos maintenance in process forum.

May you please provide us a screenshot of the message of the 'maintence in progress' page?

Edit: Your forum loads fine for me (other then an annoying pop up with a finger). I don't know what message your getting, but it seems to be working now.



-Brandon

I have looked over over your account and looked at your forum you have lots of popups on your site and this could be why your getting the problem.

There is nothing wrong with our servers as we are not getting any other complaints from other members on the site.

It could be that your account has been hacked or taken over.

What i think the best move is to rest your account and your founders tools but this can not be done until tomorrow morning as out main head office is closed.

Sending a PM to me will not help you get this work done any faster. you must not Pm any staff about this until we ask you to do so.

After we ask for you to pm us then your free to do so.

if you would like us to change a password and Email address of your forum you must PM me with a new Email address and your old one and the url of your forum Title the pm change founders Email and password.

if not we will have to hold out until monday when our office is open for a pro admin to deal with this.

You are good bro.

Hello,

I can confirm that there was absolutely no problem or attack on our servers. So what is your problem exactly, try to be clear please?