Likely Spam attack underway.

I'm not worried about the guests; they can read about what Trainz is all about and maybe learn something.

The problem is that anyone who registers on the forum but doesn't have a Trainz version registered to their username is allowed to start threads and reply to messages. That's clearly a free pass for spam and trolls.
Reading on this forum should be free for everyone, but active participation should only be allowed to owners of some version of Trainz.
 
I'm not worried about the guests; they can read about what Trainz is all about and maybe learn something.

The problem is that anyone who registers on the forum but doesn't have a Trainz version registered to their username is allowed to start threads and reply to messages. That's clearly a free pass for spam and trolls.
Reading on this forum should be free for everyone, but active participation should only be allowed to owners of some version of Trainz.

I agree completely. I see no reason for anyone who doesn't have a registered Trainz version to be posting in any of the forum. However, there could be ONE panel open for those who want more info before plunking down their money for a version. Granted, this would once again invite spam, but it would also limit it to one panel.

Bill
 
It may (or may not) be related but the Trainz Wiki Index page is very slow to load and, when it does, will often default to a very basic text layout. Links to pages from the Index are also slow to load and often do not show all the graphic elements.

Helpdesk ticked submitted.
 
It may (or may not) be related but the Trainz Wiki Index page is very slow to load and, when it does, will often default to a very basic text layout. Links to pages from the Index are also slow to load and often do not show all the graphic elements.

Helpdesk ticked submitted.
It's been like that for me over the last couple of days. Now the WiKi (TS2009.com) server seems to be down with an SSL handshake issue.
 
Cloud-Share-Error.png
 
Total: 5,278 (members: 12, guests: 5,266)

Definitely not just people reading the forum. Seems more like a brute force attack trying to guest passwords.
 
It isn't directed at just this forum. It is directly at the server hosting hundreds if not thousands of hosting accounts. Auran.com and TS2009.com are just on that server.
 
I had one on my forum last year, wondering why the database wouldn't load due to too many queries, turns out 7222 users or bots were trying to access at the same time, my webhost then suggested cloudflare, where I then blocked all traffic from China which was where most of it was coming from, which fixed the problem.
 
I had one on my forum last year, wondering why the database wouldn't load due to too many queries, turns out 7222 users or bots were trying to access at the same time, my webhost then suggested cloudflare, where I then blocked all traffic from China which was where most of it was coming from, which fixed the problem.
@marky7890 -
I've also been having a lot of issues with my forums towards the end of 2025 thanks to the scambots. Most times I had to take the entire forums down by subspending it for a while or deal with loading issues on the forums which sometiems affected my website.

This was when I added Cloudflare to my entire site and all subdomains which has helped. I've also added a a 3rd party captcha challenge to replace the builtin PHPBB captcha challenge which also has helped a lot.

To help reduce bandwidth as users can upload directly to my forums, I've made it where only logged in/registered users can view all uploaded files and images. This also helped a lot.


If this is actually a spam attack.
why tho.
It’s the forums for a trainz simulator.
@Hoglin9899 -
Spambots don't care as most are automated.
They'll identify the forums by crawling the web for specific signatures of common forum software such as Xenforo (the forum software N3V uses). Then they will register with their generated username, password, and email and post their links before getting banned.


cheers
 
The problem now appears to have been resolved. Access to the Wiki at least (i.e. online/trs2009.com) now seems to be back to normal (touch wood).
 
That Cloudflare went down a while back and I couldn't access some train forum about real railroads because Cloudflare was down, but then later it was back up. Is that something to make sites more secure?
 
That Cloudflare went down a while back and I couldn't access some train forum about real railroads because Cloudflare was down, but then later it was back up. Is that something to make sites more secure?
Yes, it helps to make sites both more secured and adds CDN abilities.

cheers
 
Back
Top