Major DDoS / Spam Attack on BiggerPockets This Morning

Major DDoS / Spam Attack on BiggerPockets This Morning

Joshua D.Pro Member
BiggerPockets Founder · HI · Member since 2008 · 16k+ posts · 5k+ votes

Hey BP Family - 

This morning BiggerPockets was attacked by what appears to be some kind of network of spammers, including folks from Korea, Hong Kong, Southern California and elsewhere. This may have been a simple spam attack or a DDoS. We're not sure of the intent, but obviously it wasn't positive. 

We've been working to ensure something like this can't happen again, but this is the first attack of this kind we've faced in the 10+ years the site has been around, so we're in the middle of working on countermeasures. We've had many DDoS attacks over the years, but none quite like this.

Meanwhile, I want to apologize to those of you who saw this, and I especially want to apologize to those who got email notifications for these posts.

Please bear with us as we deal with this and if you see something, say something.  Seriously -- just report any accounts that are spamming and we'll nail them.

Thanks for the patience.

Josh

9Reply
96 views

Most Popular Reply

Real Estate Agent · San Antonio, TX · Member since 2014 · 311 posts · 176 votes
11y

Kim Jong Un is after you again......

See this reply in the discussion

57 Replies

Jump to latestLatest
  • Real Estate Agent · San Antonio, TX · Member since 2014 · 311 posts · 176 votes
    11y

    Kim Jong Un is after you again......

  • Lender · Greater LA/Orange County area, CA · Member since 2012 · 3k+ posts · 3k+ votes
    11y

    Amazing! 

    I do not understand if their collective motives are to harvest and aggregate data and monetize or more hostile and punitive? 

    Is this apparent or obvious or am I just naive?

  • Real Estate Agent · New York City, NY · Member since 2015 · 36 posts · 14 votes
    11y

    YOU CAN'T STOP MY HUSTLE! :) 

  • Andrew SyriosPro Member
    Moderator
    Residential Real Estate Investor · Kansas City, MO · Member since 2014 · 10k+ posts · 5k+ votes
    11y

    The bigger you are the bigger target you are. One of the downsides of growth I guess. Good luck!

  • Contractor · Pittsburgh, PA · Member since 2014 · 885 posts · 359 votes
    11y

    Hey, spammers found BP and deemed it worthy of their shadiness, that's like the internet's red badge or courage or something =) this is probably your reward for being #1 on amazon and itunes.

  • Flipper/Rehabber · North, NJ · Member since 2014 · 91 posts · 23 votes
    11y

    Thanks @Joshua D.! 

  • Lender · Fremont, CA · Member since 2014 · 292 posts · 102 votes
    11y

    - Did you check with Brandon to see if he is mad at you ? 

    - This confirms that you dont need a damn LLC/S/C Corp to protect yourself.

    (just kidding...)

    I hope you fix it soon and have more network security. This forum has been amazing for thousands of people. Keep up the good work and let this not stop you from growing and securing the network.

  • Real Estate Agent · Owasso, OK · Member since 2014 · 517 posts · 400 votes
    11y

    It was me.  I'm sorry.  I was feeling aggressive last night and used the Rental Analysis tool  to analyze a deal for every apartment building in Tulsa and apparently it overloaded the system.

    I am not sure what the limit is, but it started acting sluggish around 14,000 units.

  • Rental Property Investor · New York, NY · Member since 2013 · 136 posts · 101 votes
    11y
  • Investor · Sammamish, WA · Member since 2013 · 94 posts · 84 votes
    11y

    Thanks for the heads up.  

  • Investor, Entrepreneur, Educator · Springfield, MO · Member since 2009 · 21k+ posts · 12k+ votes
    11y

    Well, my apologies to everyone, I probably ticked them off telling them they couldn't do something and they sent the Army hackers after us. Sorry, but can't promise it won't happen again. :)

    Josh, they hit early this morning (usual tactic with a historical note) and lost the battle before noon, great defense, good job! 

    Now, let us know who they are and we can all email them at 6:00 PM CST. No body messes with BP!  :)

  • Orlando, FL · Member since 2013 · 29 posts · 8 votes
    11y
    Is there a plan to implement two-factor authentication?
  • Investor · Tromsø, Norway (Europe) · Member since 2015 · 431 posts · 194 votes
    11y

    Thanks for letting us know. :)

  • Real Estate Investor · New York, NY · Member since 2014 · 81 posts · 46 votes
    11y

    hey @Joshua D., many companies offer enhanced DNS protection, but you should also go to your internet provider, get in touch with the the network operating centers to make sure they block any unwanted traffic, help you out when you're getting attacked as this is typically a service provided to businesses. 

    Beef up that firewall, drop junk packets, block things like ICMP if you don't need it to go through. 

    Best of luck, as the other members stated, getting attacked is a great sign of BP being onto something. 

  • Lynnwood, WA · Member since 2015 · 221 posts · 157 votes
    11y

    cough... cloudflare... cough

  • Rental Property Investor · Roscoe, IL · Member since 2015 · 44 posts · 5 votes
    11y

    Thanks for letting us know! :)

  • Joshua D.Pro Member
    OP
    BiggerPockets Founder · HI · Member since 2008 · 16k+ posts · 5k+ votes
    11y

    Folks - We're pretty adept at this and have dealt with many attacks over the years.  Even the biggest sites out there face outages from these kinds of things. We have Cloudflare and other countermeasures in place.

    Thanks for the suggestions . . . 

    We're on it ;)

    Josh

  • Curtis YoderPro Member
    Rental Property Investor · Tulsa, OK · Member since 2014 · 241 posts · 187 votes
    11y

    Good job @Chris Simmons!! lol

  • Investor · Willow Spring, NC · Member since 2009 · 5k+ posts · 3k+ votes
    11y

    Given the current state of real estate (meaning there are few deals and really hard to find) I should capitulate and go back to network security.

  • Investor · Dallas, TX · Member since 2014 · 2k+ posts · 1k+ votes
    11y
    Originally posted by @Joshua D.:

    Folks - We're pretty adept at this and have dealt with many attacks over the years.  Even the biggest sites out there face outages from these kinds of things. We have Cloudflare and other countermeasures in place.

    Thanks for the suggestions . . . 

    We're on it ;)

    Josh

     The seriously geeky, sensing something that actually does fall into their real area of expertise, stating the obvious.  ;-)

    Bill Gulley...if this was related to people you've made mad, the site would be down, not just under attack!  LOL  Keep up the good work!

  • Engineer · Schaumburg, IL · Member since 2015 · 22 posts · 4 votes
    11y

    I'm considering buying a multifamily in the NW suburbs of Pyongyang.  What are the likely challenges I'll face?

    Kidding aside, nice job on cleaning that up so quickly @Joshua D.!   You guys are on it.

  • Investor, Entrepreneur, Educator · Springfield, MO · Member since 2009 · 21k+ posts · 12k+ votes
    11y

    So, is cloudflare a code word within the NSA? We have about 45 minutes left. the best defense is a good offense. All hands on deck, man your key boards, you don't need to see the whites of their eyes, fire at will! This is war!!!!! Josh, (BP Papa) give us target acquisition please, we are at the ready! This is BP Gulf Yankie, out! :)

  • Investor · Riverside, CA · Member since 2014 · 351 posts · 220 votes
    11y

    so what you saying is the offer that was made to me to buy 50 acres in down town North Korea may be a scam....... I already have a hard money commitment 

  • Oakley, CA · Member since 2014 · 38 posts · 11 votes
    11y
    I thought I was going crazy when all the posts were in another language on my iOS app this morning.
  • Dawn AnastasiPro Member
    Rental Property Investor · Milwaukee, WI · Member since 2013 · 6k+ posts · 4k+ votes
    11y

    It looks like someone just tried it again ... caught it and removed it.

Join the conversationCreate a free account to reply, vote on answers and follow this thread.