[DrCaleb]

Yes, https is totally the problem. If I go to the URL bar, there is a little lock icon. If I click, it lets me disable https: for now, and the site appears as normal.

[Scape]

Confirmed. Https breaks the site.

[herbie]

Back to css totally borked, logged off changing pages, etc.
Any progress to report? The site has become unuseable.

[Canadaka]

Not sure what's going on, the site seems to just constantly be under attack. I complain to the VPS host and they block some more IPs and its ok for a few hours before going to shit again.

I have the site behind Cloudflare under "High" security and bot fight mode enabled. Also rate limiting, blocking "threat score" over 60 and blocking all traffic from Asia and Africa.

[DrCaleb]

A company I take care of their IT also gets constantly attacked, but from the US. If you hang RDP on the internet, it becomes a huge target.

I block all access to RDP except from specific IPs. That helps performance, but doesn't stop the attacks.

[Canadaka]

There are no RDP ports exposed.

[DrCaleb]

[Scape]

I wonder if London Drugs could say the same...

[herbie]

Possibly:
had a bank of servers years back, with trekky names. The webserver sulu.domain.net got hit like this one. Changed the name to Q.domain.net and the IP to fix it.
Around 5 or so years later I made a new server for something else and reused the name sulu.domain.net w yet another IP and it was instantly under attack again. The new one used completely diff software and years later Ubuntu Server version.
I also gave up hosting any PhpBB 2.x and Joomla sites as they seemed to be hacker magnets.

[DrCaleb]

herbie herbie:

I also gave up hosting any PhpBB 2.x and Joomla sites as they seemed to be hacker magnets.

^^^

Port the databases to Mastadon. It's not pretty, but it's secure.

[DrCaleb]

Since the site has become more stable lately, I went to renew my Gold membership, but can't find a working link.

The "Paycert" link seemed to go to a CN Tower Merch shop. None of the Paypal links seemed valid.

[herbie]

Stable?
I'm able to login, but the css is so borked the site is unusable. With ANY browser on ANY OS. Ffox, Edge, Chrome, Brave, Safari on i)S or Mac, FFox or Chromium on Linux.
I picked through a screen of scrambled text just to post this and saw there are new posts, so any suggestions?

I even set up a test of PuppyLinux yesterday on an ancient Netbook and out of curiosity tried the site with its Lite browser... same mess.
When I post, I get the 'posting to unsecured site' warning.

[xerxes]

Ditto for me.

[DrCaleb]

herbie herbie:

I picked through a screen of scrambled text just to post this and saw there are new posts, so any suggestions?

Only for me in Windows does Firefox force https:

If I go to the URL bar, and click on the lock, it lets me disable https: temporally. After that everything looks normal. New posts, recent posts, submission windows, etc.

Firefox on Linux doesn't force https:, so the site looks normal. I assume chrome and edge have something similar.

[raydan]

DrCaleb DrCaleb:

Only for me in Windows does Firefox force https:

Doesn't force it for me.