3 Years of Service
This isn't the first time this has happened.
You must be registered to see attachments
Attachments
You must be registered for see attachments list
Last edited:
Anyone able to access WTF? For the last 2 days, i am only getting a 504 gateway time-out
No clue what's going on right now. Who knows how long it’s been throwing 504 errors… Just dreading it’ll end up like Kemono......
Some people just have too much time, and too much maliceIt is just one person under attack by the world that wants digital nipples gone but do nothing IRL
I'm getting the same and based on these other posts it's a hit or miss situation at the moment .Anyone able to access WTF? For the last 2 days, i am only getting a 504 gateway time-out
Damn, I didn' think it was THAT cheap...Sites are constantly getting DDoS-attacked for various reasons; here’s a live DDoS map...
You must be registered to see links
Most likely because WTF is a growing loli/shota forum... (and loli/shota content dont like common folks) by the way, fuck95 is also under constant DDoS attack.
That’s why you sometimes get a 500 gateway error...
WTF could switch to a different host; that site would probably get hit too, but I bet it has anti-DDoS protection...
There are always people who dislike a site for some reason and unleash DDoS stressers and booters on it.
You can even buy a DDoS stresser yourself for a bit of money:
You must be registered to see links
You must be registered to see links
We live in a world where you can screw over anyone you don't like just by paying a little money, great, isn't it?
Someone needs to DDoS the DDoS websites...Sites are constantly getting DDoS-attacked for various reasons; here’s a live DDoS map...
You must be registered to see links
Most likely because WTF is a growing loli/shota forum... (and loli/shota content dont like common folks) by the way, fuck95 is also under constant DDoS attack.
That’s why you sometimes get a 500 gateway error...
WTF could switch to a different host; that site would probably get hit too, but I bet it has anti-DDoS protection...
There are always people who dislike a site for some reason and unleash DDoS stressers and booters on it.
You can even buy a DDoS stresser yourself for a bit of money:
You must be registered to see links
You must be registered to see links
We live in a world where you can screw over anyone you don't like just by paying a little money, great, isn't it?
Vistarr gets more stubborn every time WTF is attacked. Being DDOS'd is paradoxically great for the site's survival since it survives on pure spite.I wonder if they're working on that, or if Vistarrr just moved on.
smart.Vistarr gets more stubborn every time WTF is attacked. Being DDOS'd is paradoxically great for the site's survival since it survives on pure spite.
But with a DDOS like this you kinda have to wait it out until the attackers get bored.
BTW, I send Vistarr a message about a proposal to have a very small Xenforo extension that enables users that are older than 3 months to create a private key + random deviceid + public key locally and register the random deviceid + public key to their account.
Then in normal operation, nothing changes. But if Vistarr uploads a ddos_mode_active.txt to his server, a PHP script would intercept calls before it reaches Xenforo. If the requester has registered a key and therefore can prove they had access to the forum in the past, they get a 24h cookie that enables them to access Xenforo to log in to their actual account (with their actual credentials). This cookie keeps tracks of how often they access the forum per few seconds, if they spam requests the device key gets revoked.
Note: The device key is purely a DDOS protection, you won't be able to login to anything with it. If somebody steals the key, worst case is that they can DDOS the server with it with a few requests, which would invalidate the key and mean the user unfortunately needs to wait out the DDOS attack, but nothing worse than that.
In this way, if an anti with too much time on their hands tries to attack WTF again, you have a pretty cheap way to filter out requests before they even hit Xenforo and it would probably allow forum access for legitimate users even during a DDOS attack. Of course, it's shit for new users they won't be able to use the forum, but currently no one can.
If someone spots a flaw in this mechanism or already knows it won't work the way I think it works I'm all ears lol. I'm not experienced with DDOS, I figured that if you could reject malicious requests with as little calculation as possible you can mitigate them, but it might very well be the case that it's the amount of requests that's the problem, not even the compute spend per request.