WelcomeWelcome | FAQFAQ | DownloadsDownloads | WikiWiki
« previous next »
Pages: [1] 2   Go Down

Author Topic: question for admin/mods: wondering reason for increased forum website traffic?  (Read 2232 times)

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
question for admin/mods: wondering reason for increased forum website traffic?
« on: August 23, 2025, 01:49:31 AM »
question for admin/mods: wondering reason for increased forum website traffic?

iirc, up until quite recently the most online ever was about 1k less?

did we get a mention somewhere recently?

or is it just increased ai/bot/llm/lvm/etc activities?
« Last Edit: August 23, 2025, 02:04:34 AM by gadget42 »
Logged
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
Re: question for admin/mods: wondering reason for increased forum website traffic?
« Reply #1 on: September 01, 2025, 02:20:56 AM »
just noticed that a few hours after i posted the above commentary on the increased traffic from ai/bot/llm/lvm/etc, the ai/bot/llm/lvm/etc traffic doubled. ai/bot/llm/lvm/etc is ruining the open web for everyone everywhere.
Logged
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline Paul_123

  • Administrator
  • Hero Member
  • *****
  • Posts: 1536
Re: question for admin/mods: wondering reason for increased forum website traffic?
« Reply #2 on: September 01, 2025, 08:55:22 AM »
It’s bots.  There is not an easy way to remove them from the online count
Logged

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
Re: question for admin/mods: wondering reason for increased forum website traffic?
« Reply #3 on: September 02, 2025, 09:43:50 AM »
imho i think it is better that forum members/visitors ARE able to see the bot traffic

i would not want it hidden at/on any website, in fact it should be actively called out by all the websites under siege.
Logged
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline Paul_123

  • Administrator
  • Hero Member
  • *****
  • Posts: 1536
Re: question for admin/mods: wondering reason for increased forum website traffic?
« Reply #4 on: September 02, 2025, 10:01:59 AM »
Most of them are well behaved, honoring rate settings.   I’ve not seen it really affect the load of the server.
Logged

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
Re: question for admin/mods: wondering reason for increased forum website traffic?
« Reply #5 on: September 02, 2025, 06:36:16 PM »
Logged
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
Re: question for admin/mods: wondering reason for increased forum website traffic?
« Reply #6 on: December 21, 2025, 06:11:10 AM »
wowza!

Most Online Ever: 16857 (December 09, 2025, 12:37:20 PM)

anyone know the _what/why_ regarding this recent rather large spike in MOE traffic?
(might be ai/bot/llm/lvm/etc using residential based proxies which would massively increase the "individual" entity traffic based on originating ip addresses)
(re: residential proxies, see for example _randomly_referenced_ oxylabs.io and www[.]webshare.io)
Logged
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
Re: question for admin/mods: wondering reason for increased forum website traffic?
« Reply #7 on: December 29, 2025, 10:09:49 AM »
after reading a recent commentary that included information about aisuru botnet here:

https://blog.cloudflare.com/ddos-threat-report-2025-q3/#aisuru-breaking-records-with-ultrasophisticated-hyper-volumetric-ddos-attacks

more searching resulted in a couple pieces from krebs:

https://krebsonsecurity.com/2025/10/ddos-botnet-aisuru-blankets-us-isps-in-record-ddos/

https://krebsonsecurity.com/2025/10/aisuru-botnet-shifts-from-ddos-to-residential-proxies/

snippet tidbit(mostly because an earlier post referenced oxylabs.io and www[.]webshare.io):
Quote
Today, Spur says it is tracking an unprecedented spike in available proxies across all providers, including;

LUMINATI_PROXY    11,856,421
NETNUT_PROXY    10,982,458
ABCPROXY_PROXY    9,294,419
OXYLABS_PROXY     6,754,790
IPIDEA_PROXY     3,209,313
EARNFM_PROXY    2,659,913
NODEMAVEN_PROXY    2,627,851
INFATICA_PROXY    2,335,194
IPROYAL_PROXY    2,032,027
YILU_PROXY    1,549,155
Logged
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
Re: question for admin/mods: wondering reason for increased forum website traffic?
« Reply #8 on: April 04, 2026, 07:59:52 AM »
naturally the bots are still out of control:

https://forum.tinycorelinux.net/index.php/topic,28089.0.html
Logged
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline gadget42

  • Hero Member
  • *****
  • Posts: 1030
Re: question for admin/mods: wondering reason for increased forum website traffic?
« Reply #9 on: April 07, 2026, 04:28:55 PM »
 Most Online Today: 31582. Most Online Ever: 31582 (Today at 10:43:55 AM)
Logged
** WARNING: connection is not using a post-quantum kex exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
** Also see: post quantum internet 2025 - https://blog.cloudflare.com/pq-2025/

Offline Paul_123

  • Administrator
  • Hero Member
  • *****
  • Posts: 1536
Re: question for admin/mods: wondering reason for increased forum website traffic?
« Reply #10 on: April 07, 2026, 04:43:03 PM »
Yup.  They all nailed the server at the same time about 11:40 EDT.

It’s why a lot of servers are putting cloudflare in front of them.
Logged

Offline Vic

  • Newbie
  • *
  • Posts: 8
Re: question for admin/mods: wondering reason for increased forum website traffic?
« Reply #11 on: April 07, 2026, 04:45:00 PM »
It is probably my fault. I check TC a few times a week.

Sorry

Vic
Logged

Offline Rich

  • Administrator
  • Hero Member
  • *****
  • Posts: 12684
Re: question for admin/mods: wondering reason for increased forum website traffic?
« Reply #12 on: April 07, 2026, 04:52:06 PM »
Hi Paul_123
There were about 16000 users around 11:40. They really managed
to slow the site down. When I returned later on I saw the number
had peaked to over 31000.
Logged

Offline CNK

  • Wiki Author
  • Sr. Member
  • *****
  • Posts: 430
Re: question for admin/mods: wondering reason for increased forum website traffic?
« Reply #13 on: April 07, 2026, 08:08:17 PM »
Quote from: Paul_123 on April 07, 2026, 04:43:03 PM
It's why a lot of servers are putting cloudflare in front of them.

It's not clear if that means you're considering doing the same, but I'll just make the point that when most sites do that (or start using any other service that requires Javascript to try and verify humanity) I stop visiting.

I know it's a tough problem to solve (my own website was getting crippled by millions of bot hits a day a while ago), and other common solutions like blocking IPs from certain countries may cut off other users, but I'm just sharing my point of view.
Logged

Offline Paul_123

  • Administrator
  • Hero Member
  • *****
  • Posts: 1536
Re: question for admin/mods: wondering reason for increased forum website traffic?
« Reply #14 on: April 07, 2026, 08:10:43 PM »
Hits from today by useragent   only the top 20

Code: [Select]
156472 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
  43616 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
  11518 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
   9614 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
   4645 Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7680.177 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
   3814 Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/115.0
   2841 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
   2662 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
   2157 Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0
   1728 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
   1683 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36
   1605 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; ClaudeBot/1.0; +claudebot@anthropic.com)
   1543 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot
   1446 Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
   1255 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)
   1079 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
    927 Terra Cotta 0.1 https://www.github.com/ceramicTeam/CeramicTerracotta
    788 Wget
    759 Mozilla/5.0 (compatible; Thinkbot/0.5.8; +In_the_test_phase,_if_the_Thinkbot_brings_you_trouble,_please_block_its_IP_address._Thank_you.)
    755 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 newsai/1.0 Safari/537.36

The first user agent was the offender.  they launched almost 60 requests per second for about 20 minutes)   Here is the real problem.  This attack came from 104,000 different ip addresses.
Logged
Pages: [1] 2   Go Up
« previous next »