WelcomeWelcome | FAQFAQ | DownloadsDownloads | WikiWiki

Author Topic: question for admin/mods: wondering reason for increased forum website traffic?  (Read 1438 times)

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1011
question for admin/mods: wondering reason for increased forum website traffic?

iirc, up until quite recently the most online ever was about 1k less?

did we get a mention somewhere recently?

or is it just increased ai/bot/llm/lvm/etc activities?
« Last Edit: August 23, 2025, 02:04:34 AM by gadget42 »
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1011
just noticed that a few hours after i posted the above commentary on the increased traffic from ai/bot/llm/lvm/etc, the ai/bot/llm/lvm/etc traffic doubled. ai/bot/llm/lvm/etc is ruining the open web for everyone everywhere.
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline Paul_123

  • Administrator
  • Hero Member
  • *****
  • Posts: 1486
It’s bots.  There is not an easy way to remove them from the online count

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1011
imho i think it is better that forum members/visitors ARE able to see the bot traffic

i would not want it hidden at/on any website, in fact it should be actively called out by all the websites under siege.
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline Paul_123

  • Administrator
  • Hero Member
  • *****
  • Posts: 1486
Most of them are well behaved, honoring rate settings.   I’ve not seen it really affect the load of the server.

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1011
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1011
wowza!

Most Online Ever: 16857 (December 09, 2025, 12:37:20 PM)

anyone know the _what/why_ regarding this recent rather large spike in MOE traffic?
(might be ai/bot/llm/lvm/etc using residential based proxies which would massively increase the "individual" entity traffic based on originating ip addresses)
(re: residential proxies, see for example _randomly_referenced_ oxylabs.io and www[.]webshare.io)
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1011
after reading a recent commentary that included information about aisuru botnet here:

https://blog.cloudflare.com/ddos-threat-report-2025-q3/#aisuru-breaking-records-with-ultrasophisticated-hyper-volumetric-ddos-attacks

more searching resulted in a couple pieces from krebs:

https://krebsonsecurity.com/2025/10/ddos-botnet-aisuru-blankets-us-isps-in-record-ddos/

https://krebsonsecurity.com/2025/10/aisuru-botnet-shifts-from-ddos-to-residential-proxies/

snippet tidbit(mostly because an earlier post referenced oxylabs.io and www[.]webshare.io):
Quote
Today, Spur says it is tracking an unprecedented spike in available proxies across all providers, including;

LUMINATI_PROXY    11,856,421
NETNUT_PROXY    10,982,458
ABCPROXY_PROXY    9,294,419
OXYLABS_PROXY     6,754,790
IPIDEA_PROXY     3,209,313
EARNFM_PROXY    2,659,913
NODEMAVEN_PROXY    2,627,851
INFATICA_PROXY    2,335,194
IPROYAL_PROXY    2,032,027
YILU_PROXY    1,549,155
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/