If the attacks on LQ are like the ones I've seen today and over the last few years on sites I help maintain, then it might be sufficient to block or constrain a few subnets rather than blocking all registered LQ users while blocking the attacks.

I'm afraid it is not that simple. One side will try to protect the host and the other side will try to attack it. Both sides changes (evolves?) continuously.

Seems to have been fixed now. Opened LQ 4 times now, and not been asked to prove I'm human.

1 members found this post helpful.

Yes, that's fixed, thank God. But we're not back to normal yet. Everything seems to be running very slow compared to other sites.

No requests to prove human, that is a step in the right direction. Thanks!

I agree. Impossible to reply or preview some posts.

Ray ID: 8870ac5b3ca7013c
Ray ID: 8870b3dccc54a454
Ray ID: 8870ba7ba96a01a5

Good news! We're back up to speed.

Not completely. Still suffering with security checks and cant reply/post on some threads.

for today I'm done. let's try tomorrow.

I am seeing some delays and minor performance issues, but no longer seeing the long delays or security (prove you are human) checks. It appears mostly back to normal at this time.

A bit of slight delay but no way near what it was before. Thanks for the fixes!

Here's a good write up about a similar problem:

https://www.going-flying.com/blog/hy...sted-bots.html

I don't know the details of the LQ situation but the ever-changing solution to the ever-changing nature of the attacks might be similar for a while to the above link. It is surprisingly close to how I dealt with things on some publicly facing servers.

The other change I made was to serve static pages when feasible. While it's (sometimes) nice that old threads can be re-opened, it does put a burden on the back end when LLMs and other bots start scraping, especially the poorly configured or poorly designed ones. Some sites automatically archive old threads as static after a time interval has passed.

This is still a frustrating place to use. Clicking a button or link more likely does nothing that what it's supposed to do. Sometimes one extra click is enough. Sometimes several clicks works. Sometimes a click of the stop button followed by the original button or link works. Often no amount of clicking produces anything more than a status bar message sending... or waiting.... I started trying to send a private message about 10 minutes ago. Nothing has worked so far. It's always "Waiting for linuxquestions.org".

1 members found this post helpful.

I wonder if your "several clicks" are being detected as a possible attack?
I do believe LQ IS still under attack right now. The mitigations are still there, they have just been refined and focused for less impact.

To post #147. Been that way here for a week. I can still Browse LQ without scripts turned on. Might have to load the page twice for it to display.

Let me see if I can post.
https://0x0.st/XNs7.mp3

Edit: Yup, no problem that time.

It wouldn't surprise me, but I don't try several in quick succession unless reasonable patience fails. I believe it may have improved since my previous post, more first try successes with preview and submit buttons.