WelcomeWelcome | FAQFAQ | DownloadsDownloads | WikiWiki

Author Topic: question for admin/mods: wondering reason for increased forum website traffic?  (Read 1922 times)

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
question for admin/mods: wondering reason for increased forum website traffic?

iirc, up until quite recently the most online ever was about 1k less?

did we get a mention somewhere recently?

or is it just increased ai/bot/llm/lvm/etc activities?
« Last Edit: August 23, 2025, 02:04:34 AM by gadget42 »
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
just noticed that a few hours after i posted the above commentary on the increased traffic from ai/bot/llm/lvm/etc, the ai/bot/llm/lvm/etc traffic doubled. ai/bot/llm/lvm/etc is ruining the open web for everyone everywhere.
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline Paul_123

  • Administrator
  • Hero Member
  • *****
  • Posts: 1532
It’s bots.  There is not an easy way to remove them from the online count

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
imho i think it is better that forum members/visitors ARE able to see the bot traffic

i would not want it hidden at/on any website, in fact it should be actively called out by all the websites under siege.
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline Paul_123

  • Administrator
  • Hero Member
  • *****
  • Posts: 1532
Most of them are well behaved, honoring rate settings.   I’ve not seen it really affect the load of the server.

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
wowza!

Most Online Ever: 16857 (December 09, 2025, 12:37:20 PM)

anyone know the _what/why_ regarding this recent rather large spike in MOE traffic?
(might be ai/bot/llm/lvm/etc using residential based proxies which would massively increase the "individual" entity traffic based on originating ip addresses)
(re: residential proxies, see for example _randomly_referenced_ oxylabs.io and www[.]webshare.io)
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
after reading a recent commentary that included information about aisuru botnet here:

https://blog.cloudflare.com/ddos-threat-report-2025-q3/#aisuru-breaking-records-with-ultrasophisticated-hyper-volumetric-ddos-attacks

more searching resulted in a couple pieces from krebs:

https://krebsonsecurity.com/2025/10/ddos-botnet-aisuru-blankets-us-isps-in-record-ddos/

https://krebsonsecurity.com/2025/10/aisuru-botnet-shifts-from-ddos-to-residential-proxies/

snippet tidbit(mostly because an earlier post referenced oxylabs.io and www[.]webshare.io):
Quote
Today, Spur says it is tracking an unprecedented spike in available proxies across all providers, including;

LUMINATI_PROXY    11,856,421
NETNUT_PROXY    10,982,458
ABCPROXY_PROXY    9,294,419
OXYLABS_PROXY     6,754,790
IPIDEA_PROXY     3,209,313
EARNFM_PROXY    2,659,913
NODEMAVEN_PROXY    2,627,851
INFATICA_PROXY    2,335,194
IPROYAL_PROXY    2,032,027
YILU_PROXY    1,549,155
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
 Most Online Today: 31582. Most Online Ever: 31582 (Today at 10:43:55 AM)
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline Paul_123

  • Administrator
  • Hero Member
  • *****
  • Posts: 1532
Yup.  They all nailed the server at the same time about 11:40 EDT.

It’s why a lot of servers are putting cloudflare in front of them.

Offline Vic

  • Newbie
  • *
  • Posts: 8
It is probably my fault. I check TC a few times a week.

Sorry

Vic

Offline Rich

  • Administrator
  • Hero Member
  • *****
  • Posts: 12678
Hi Paul_123
There were about 16000 users around 11:40. They really managed
to slow the site down. When I returned later on I saw the number
had peaked to over 31000.