Topic: Furry Sites Getting DDoSed

Posted under General

This topic has been locked.

So I've noticed that Inkbunny, Weasyl, Sofurry, and Furaffinity keep malfunctioning when I tried to access them a day or two ago. What's everyone's thought on this current issue?

Updated by Millcore

We're better than them. E621 don't need any DDOS to keep malfunctioning on daily basis. :P

Updated by anonymous

It's annoying, but will hopefully pass soon. As much as I love e6, it's not a great place for artists to advertise themselves or do business, so I'm not sure what I'm going to do if FA has breathed its last breath.

if anyone disagrees with that though! let me know! I'd love some advice on how to use e6 as a base of operations

Updated by anonymous

Gilda_The_Gryphon said:
We're better than them. E621 don't need any DDOS to keep malfunctioning on daily basis. :P

That's the sad, cold truth. X)

Updated by anonymous

Tokaido said:
It's annoying, but will hopefully pass soon. As much as I love e6, it's not a great place for artists to advertise themselves or do business, so I'm not sure what I'm going to do if FA has breathed its last breath.

if anyone disagrees with that though! let me know! I'd love some advice on how to use e6 as a base of operations

I'm thinking about buying some adspace on e621 and derpibooru for when I open up commissions myself. I update on a lot of websites, but FA is where most of my watchers are; unfortunate as that is.

Updated by anonymous

Gilda_The_Gryphon said:
We're better than them. E621 don't need any DDOS to keep malfunctioning on daily basis. :P

I lol'd.

But on topic: this has actually been on my mind for the past day or two. Seems like every main furry-centric art site (except us). My guess is someone doesn't like furries and is using their talents to screw up furry websites to overcompensate for something. But that's just personal opinion, not based on anything at all. It might just be picking a few targets or a theme-to-target out of a hat.

Also, I haven't been in the fandom long enough to guess at why but I noticed that of those sites affected, FA seems to be the only one that rolled completely over dead and has the most empty type updates about it on their twitter. Sofurry is also belly-up but they sound like they're closer to getting back up, and a little more coherent on their twitter updates. Inkbunny has been intermittent but still running. Weasyl sounds like they got hit, but handled it with style. So I'm kinda curious why FA took it the hardest? Is it poor management/site-structure/etc so it doesn't take much to knock it down like dominoes? I know they're not winning any awards in those areas as a website, so I wouldn't be surprised if it leaves them more vulnerable. But was just curious why they took it by far the hardest overall.

Some interesting reading on the subject: http://www.flayrah.com/5888/furry-websites-face-broad-denial-service-attacks and discussion here: https://forums.weasyl.com/vbulletin/showthread.php?6475-Massive-DDos-Attack-Going-on-Across-the-Web

Oh and this is seriously cool to watch: http://www.digitalattackmap.com/#anim=1&color=0&country=ALL&time=16358&view=map

Updated by anonymous

furrypickle said:
I lol'd.

But on topic: this has actually been on my mind for the past day or two. Seems like every main furry-centric art site (except us). My guess is someone doesn't like furries and uses their talents to screw up furry websites to overcompensate for something. But that's just personal opinion, not based on anything at all.

I haven't been in the fandom long enough to know myself, but I noticed that of those sites affected, FA seems to by the only one that rolled completely over dead and has the most empty type updates about it on their twitter. Sofurry is also belly-up but they sound like they're closer to getting back up, and a little more coherant on their twitter updates. Inkbunny has been intermittent but still running. Weasyl sounds like they got hit, but handled it with style. So I'm kinda curious why FA took it the hardest? Is it poor management/site-structure/etc so it doesn't take much to knock it down like dominoes? I know they're not winning any awards in those areas as a website, so I wouldn't be surprised if it leaves them more vulnerable. But was just curious why they took it by far the hardest overall.

Some interesting reading on the subject: http://www.flayrah.com/5888/furry-websites-face-broad-denial-service-attacks and discussion here: https://forums.weasyl.com/vbulletin/showthread.php?6475-Massive-DDos-Attack-Going-on-Across-the-Web

Oh and this is seriously cool to watch: http://www.digitalattackmap.com/#anim=1&color=0&country=ALL&time=16358&view=map

I just got this reply on tumblr regarding the topic at hand.

http://inannaeloah.tumblr.com/post/100180794631/pingagirl-maxiscore-replied-to-your

Updated by anonymous

I'd guess that we're getting doxed as well, but it's not getting through E6's kickass anti-DDOS/random bullshit shields.

Last thing I heard about the attack was from some artists journal on Weasyl, they heard that the people who hosted the attack were all from mainland china, most likely paid off to DDOS the websites being bothered at the moment.

Updated by anonymous

furrypickle said:
I lol'd.

But on topic: this has actually been on my mind for the past day or two. Seems like every main furry-centric art site (except us). My guess is someone doesn't like furries and is using their talents to screw up furry websites to overcompensate for something. But that's just personal opinion, not based on anything at all. It might just be picking a few targets or a theme-to-target out of a hat.

Also, I haven't been in the fandom long enough to guess at why but I noticed that of those sites affected, FA seems to be the only one that rolled completely over dead and has the most empty type updates about it on their twitter. Sofurry is also belly-up but they sound like they're closer to getting back up, and a little more coherent on their twitter updates. Inkbunny has been intermittent but still running. Weasyl sounds like they got hit, but handled it with style. So I'm kinda curious why FA took it the hardest? Is it poor management/site-structure/etc so it doesn't take much to knock it down like dominoes? I know they're not winning any awards in those areas as a website, so I wouldn't be surprised if it leaves them more vulnerable. But was just curious why they took it by far the hardest overall.

Some interesting reading on the subject: http://www.flayrah.com/5888/furry-websites-face-broad-denial-service-attacks and discussion here: https://forums.weasyl.com/vbulletin/showthread.php?6475-Massive-DDos-Attack-Going-on-Across-the-Web

Oh and this is seriously cool to watch: http://www.digitalattackmap.com/#anim=1&color=0&country=ALL&time=16358&view=map

FA is only not working because the DDoS was so bad for them that it started to affect other sites from the host itself, so the server hoster itself blackholed FA.

And yeah, we're DDoS'ed as well, but they aren't getting through Cloudflare, at the moment.

Updated by anonymous

Kayla-Na said:
I just got this reply on tumblr regarding the topic at hand.

http://inannaeloah.tumblr.com/post/100180794631/pingagirl-maxiscore-replied-to-your[/quote]

NotMeNotYou said:
FA is only not working because the DDoS was so bad for them that it started to affect other sites from the host itself, so the server hoster itself blackholed FA.

And yeah, we're DDoS'ed as well, but they aren't getting through Cloudflare, at the moment.

Thanks. That rounds out some of my understanding of why FA seems much harder hit.

Also, interesting to note that e621 is/was getting hit as well, but so far weathering it pretty well due to smart site decisions. It also explains why today is seeming a little slow to process page loads, votes, etc. If the worst we're getting is a little lag, then we're doing pretty damn good!

Updated by anonymous

FWIW, the Chicago servers seem to be getting hurt. Seems like the past week or so has been pretty spotty for the site, particularly in the evenings.

Honestly, without any research to go on, I'd originally thought it was just that e6 had outgrew its server capacity again.

Updated by anonymous

I'm surprised anybody would waste their money sending a DDoS through Cloudflare. It's not like most sites go to much trouble to keep their physical server IP hidden.
I mean, e621 uses their plain IP for every outgoing email, every image fetch from a remote server. Heck, they've even publicly registered their IP block.

Updated by anonymous

Yeah, but I would guess that whoever is behind it didn't take the time to ask what e6's home IP address was, and instead just told the bot farm to flood "e621.net", among others.

Updated by anonymous

furrypickle said:
Oh and this is seriously cool to watch: http://www.digitalattackmap.com/#anim=1&color=0&country=ALL&time=16358&view=map

Well that explains some things lol

NotMeNotYou said:
FA is only not working because the DDoS was so bad for them that it started to affect other sites from the host itself, so the server hoster itself blackholed FA.

And yeah, we're DDoS'ed as well, but they aren't getting through Cloudflare, at the moment.

LOL, FA infrastructure is that bad?

Updated by anonymous

Kayla-Na said:
I'm thinking about buying some adspace on e621 and derpibooru for when I open up commissions myself. I update on a lot of websites, but FA is where most of my watchers are; unfortunate as that is.

Similar problem here. Its just hard to maintain a presence on multiple other sites, uploading everything to more than a couple sites is hard enough, but I can't chat and hang out with everyone on every site AND still work on art stuff. So I picked the two sites that I think are best, FA for its large user base, and e6 for its tagging system, laid back attitude, and more-than-compitant management. Guess its time to start keeping up with tumblr now though.

NotMeNotYou said:
...And yeah, we're DDoS'ed as well, but they aren't getting through Cloudflare, at the moment.

Hah, awesome.

Updated by anonymous

NoctemWerewolf said:
Well that explains some things lol

LOL, FA infrastructure is that bad?

They probably don't have the best host in their budget.

Updated by anonymous

NotMeNotYou said:
They probably don't have the best host in their budget.

That is an impressively tactful way to convey that. *impressed*

Updated by anonymous

NotMeNotYou said:
They probably don't have the best host in their budget.

But you should see the rigs they have... they're prolly paying even more with the electricity bill than hosting...

Updated by anonymous

There's going to be a massive backlog of art when FA comes back up.

Updated by anonymous

NoctemWerewolf said:
Well that explains some things lol

LOL, FA infrastructure is that bad?

What he said vv

NotMeNotYou said:
They probably don't have the best host in their budget.

Infrastructure has little to do with it. The site is down because of a DDoS and a lack of protection from them. I don't see why someone can't just donate the $200/month for Cloudflare Business, I know there are people out there that can afford it.

Updated by anonymous

Halite said:
There's going to be a massive backlog of art when FA comes back up.

I want to see how long they take to rollback to a "desirable" state.

Updated by anonymous

PheagleAdler said:
I don't see why someone can't just donate the $200/month for Cloudflare Business, I know there are people out there that can afford it.

Furries Peeps don't give unless they get something in return. Very generous peeps are a rarity nowadays :/

Updated by anonymous

NoctemWerewolf said:
I want to see how long they take to rollback to a "desirable" state.

Why rollback? The site works perfectly, it's just that nobody can access it.

Updated by anonymous

I wanna make a Taken / Family Guy reference here!

"I don't know who you are. I don't know what you want. But what I do have are a very particular lack of skills, I will never be able to find you. But what I DO have is two dollars and a Casio wristwatch, you can have one of them."

Updated by anonymous

NotMeNotYou said:
FA is only not working because the DDoS was so bad for them that it started to affect other sites from the host itself, so the server hoster itself blackholed FA.

Ok, so, to summarise;

FA got sucked into its own asshole. Again.,

Sofurry got hit, but it's just winded and it's getting back on its feet,

Inkbunny got affected and is now a half-spazzy ragdoll,

Weasyl got hit by the beam/projectile that is a metaphor for the DDoS attack, but used the force it got from it to do a fancy flip and land safely,

And e621 is blocking the beam, DBZ-style, and holding out very well in comparison.

Am I right?

Updated by anonymous

Ryuzaki_Izawa said:
Inkbunny got affected and is now a half-spazzy ragdoll,

To be honest I haven't noticed much difficulties when browsing inkbunny recently.

Updated by anonymous

Granberia said:
To be honest I haven't noticed much difficulties when browsing inkbunny recently.

Well, I visited it and it's definitely being a spazzy ragdoll :I

Updated by anonymous

It's been fine for the last few days, just started getting a bit iffy today from what I'm seeing.

e621 is used to heavy loads all the time, so the DDOS is probably just more of the usual for it.

Updated by anonymous

Inkbunny is down too.
Fuck man :(
Edit: nevermind. It's back...
Edit 2: Now it's Weasyl...
Edit 3: IB comes and goes...
Edit 4: FA and Weasyl are back online. Sofurry's still down though...
Edit 5: Furaffinity Forums are still down...
Edit 6: Sofurry is back online. For now...
Edit 7: FAF is back online. Everything seems back to normal. For now...

Updated by anonymous

e621 gave "Web application could not be started" error for about a minute.

Updated by anonymous

Granberia said:
e621 gave "Web application could not be started" error for about a minute.

That was a server restart, shouldn't happen again.

Updated by anonymous

So is this like when FA and Weasyl got spammed to hell and back with those "Kemo is a faggot :^)" pics?

Updated by anonymous

Zedee said:
So is this like when FA and Weasyl got spammed to hell and back with those "Kemo is a faggot :^)" pics?

LOL, but i'm not that old in furry fandom, may I ask who the heck is kemo?

Updated by anonymous

FA is back online. It's still under read-only mode, but the site is accessible now.

Edit: FA is back to normal. New art is being posted as of right now.

Updated by anonymous

Mienshao said:
FA is back online. It's still under read-only mode, but the site is accessible now.

Thanks for the heads up! I have a few searches on there I've been waiting to try for finding a few sources.

Updated by anonymous

NoctemWerewolf said:
LOL, but i'm not that old in furry fandom, may I ask who the heck is kemo?

It actually happened only a few months ago, and I'm still not sure who either 'Kemo' or the spammer was, though I think it may have been linked with some drama on /vp/...

Updated by anonymous

Kemo may be an abbreviation of 'kemono', the Japanese word for furry.

Updated by anonymous

NotMeNotYou said:
Why rollback? The site works perfectly, it's just that nobody can access it.

Oh yes, don't mind me, REAL bad habit from my last DB course, DB doesn't work? nuke it and rollback (ok for students and school projects, NOT Ok in real world)

Updated by anonymous

DerpyDoom said:
Maybe they should try cloudflare. Its a free ddos protection.

Some hours before they finally got back up and running again, I got an error message trying to access FA that mentioned they're using cloudflare now. So I think that may be one of the changes FA is making after this ddos attack, is that they've switched to using cloudflare from now on which is probably a good thing. Now, I haven't seen anything official on it, but that's what one error page made it look like.

Updated by anonymous

furrypickle said:
Some hours before they finally got back up and running again, I got an error message trying to access FA that mentioned they're using cloudflare now. So I think that may be one of the changes FA is making after this ddos attack, is that they've switched to using cloudflare from now on which is probably a good thing. Now, I haven't seen anything official on it, but that's what one error page made it look like.

I'm pretty sure you're correct. They started a fund raiser to get the necessary moolah to "put fur affinity on the cloud" according to Dragoneer's twitter.

Updated by anonymous

A few brony sites are being DDoSed, too - FIMFiction is acting like a glitched ragdoll model in a Bethesda game.

Updated by anonymous

SoFurry's down.

Under Attack

Under attack! We are working hard to restore our services. Please remember we are a free site, and make no profit off of our activities. Good luck everyone!

Yep, sad fucks be DDoS'ing again.

Updated by anonymous

Jugofthat said:
SoFurry's down.

If I'm not mistaken, they use Cloudflare as well, and since Pickle said that the heavy traffic is due to hardware upgrades, said thing that is causing problems for us may be causing issues for them.
So like Pickle said, probably not an attack.

Updated by anonymous

But that would mean they're replacing their server hardware at the exact same time as us, and mistake it for an attack while being aware of the fact they're replacing their own hardware.

=/

Updated by anonymous

Granberia said:
We're better than them. E621 don't need any DDOS to keep malfunctioning on daily basis. :P

I think

Granberia said:
We're better than them. E621 don't need any DDOS to keep malfunctioning on daily basis. :P

I think I accidentally once knocked e621 down by having several tabs open.

Updated by anonymous

Our ddos protection is better than sofurry's, it's really just that an hdd died and that part of the server had to be taken down, and is currently busy syncing the raid array again.

Everything should be back to normal in an hour if our server guy is to be trusted.

Updated by anonymous

Well according to sofurry's twitter they've been having DDOS attack problems since the 13th. So I'm fairly sure it's unrelated. I'm sorry to hear they're apparently being DDOS'd. DDOS's are fairly common to the internet these days, and I hope they recover soon.

However, e621 is not caught in the same DDOS attack to the best of my knowledge. *knock on wood that it stays that way.* Cloudflare keeps us pretty protected from those as well.

All of the page loading issues today have been because we had to turn a few things off (including a load balancer) while we replaced some hardware that had just died. Getting the new one installed and synced and everything turned back on and running takes like 6+ hours apparently to get it all said and done. But I just got word we'll be back to full traffic handling in another couple of hours.

We know it's frustrating, and we've tried to keep the site up and running as much as was possible. The trouble is we get a ton of traffic on this website at all hours of the day, so having everyone compete for access when some of it is undergoing maintenance just means a lot of inconsistent page loads for everyone. There's not much we can do about that, but it should be done in a hour or two. (Depending on how closely it stays on schedule.)

Updated by anonymous

  • 1