Poll - OOPS!!

[MrBadger]

A quick poll to get an idea how wide spread this problem is. Admin are aware of the issue and the cause.

Within the last 2 weeks (since mid May), how frequently in TMC have you either had this animated screen reported, or had a banner starting "Oops!"

In addition, if you have an idea when you first started noticing the issue, that may help.

If a prolific problem, a couple of cut and paste examples of the text from the top right box would be useful (text format not image).

 

[browellm]

3 or 4 times in the last 7 days.

 

[Jason71]

Never and I am on here WAY to much

 

[Medved_77]

~20 times in the past 2 weeks but so far only when on mobile. The image used on mobile isn't formatted correctly for small devices so you only see a small part of the robot.

Suspect it's an issue with the load balancer.

 

[Jason71]

~20 times in the past 2 weeks but so far only when on mobile. The image used on mobile isn't formatted correctly for small devices so you only see a small part of the robot.

Suspect it's an issue with the load balancer.

based on the example message "this website is using a security service to protect itself" looks more like an over zealous WAF to me. Either that or the Tesla shorts are doing a DDOS attack .

 

[Medved_77]

 Access denied
This website is using a security service to protect itself from online attacks.
 . Ray ID: 6590565edb9e000a
 . Timestamp: 2021-06-0211: 28ÿ17 UTC
 . Your IP address: 86.xx.xx.xxx
 ' Requested URL:
 teslamotorsclub.coin/tmc/forums/the-uk-and-ireland.114/
 . Error reference number: 1020
 . Server ID: FL 63F66
 . User-Agent: Mozilla/5.0 (Linux; Android
 11; SM-N975F) AppleWebKit/537.36
 (KHTML, like Gecko) Chrome/91.0.4472.77
 Mobile Safari/537.36

Suggest masking your IP address if anyone else catches and reports this error.

 

[browellm]

A nice moment of irony, I just came to browse the updates to the thread and...

 

[MrBadger]

Can the info be in text format please as it needs to be easily machine readable.

 

[Bantam]

Ray ID: 65972b8f5fea549a
Timestamp: 2021-06-03 07:22:24 UTC
Your IP address: xxxx
Requested URL: teslamotorsclub.com/tmc/forums/the-uk-and-ireland.114/
Error reference number: 1020
Server ID: FL_341F3
User-Agent: Mozilla/5.0 (Windows NT 10.0;
Win64; x64)
AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/91.0.4472.77
Safari/537.36 Edg/91.0.864.37

 

[Medved_77]

Ray ID: 65974522fec454e2
Timestamp: 2021-06-03 07:39:52 UTC
Your IP address:
Requested URL: teslamotorsclub.com/tmc/forums/the-uk-and-ireland.114/
Error reference number: 1020
Server ID: FL_341F27
User-Agent: Mozilla/5.0 (Linux; Android 11; SM-N975F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Mobile Safari/537.36

 

[MrBadger]

Thanks everyone for voting and for those that have posted the log.

Admin are aware of the poll and I've updated them with the logs from above, so for now, please feel free to continue with the poll which will remain open for a couple more days, but no further logs are necessary.

 

[Medved_77]

Getting this more and more, only noticed on mobile before but now frequent on desktop too. I had the console open this time, request headers below:

Request URL: https://teslamotorsclub.com/tmc/forums/the-uk-and-ireland.114/
Request Method: GET
Status Code: 403
Remote Address: 104.26.9.140:443
Referrer Policy: strict-origin-when-cross-origin

cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
cf-ray: 65b45eaa0d41cbb8-VIE
cf-request-id: 0a84997e440000cbb8719b4000000001
content-encoding: br
content-type: text/html; charset=UTF-8
date: Sun, 06 Jun 2021 20:25:24 GMT
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
expires: Thu, 01 Jan 1970 00:00:01 GMT
nel: {"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=jxIsd8qPjUoJJTJqXrLHa2HOpuDuThwjr1dOQ0R%2BhQq6IPEpLvjQx6Tn9jN5pbV%2FgK8l5O9TCPNwtF1m83OCu%2BOc5ylKtNAzfeRulDOSSusi%2B2OPC0sUpNlTiE6Aa2%2BA"}],"group":"cf-nel","max_age":604800}
server: cloudflare
vary: Accept-Encoding
x-frame-options: SAMEORIGIN

:authority: teslamotorsclub.com
:method: GET
:path: /tmc/forums/the-uk-and-ireland.114/
:scheme: https
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
accept-encoding: gzip, deflate, br
accept-language: en,en-US;q=0.9,en-GB;q=0.8
cookie: PHPSESSID=mnoqdtpkljvaka6t8ivaofh42c; xf_csrf=YSFvjoqRjgKrv_er; _ga=GA1.2.432595046.1617210015; __gads=ID=652db1f150db9a1b-2230efbd42a70070:T=1617210014:S=ALNI_MbAewELoiE5L-K20q1K0F_TSOKp_Q; xf_user=126607%2CV2_46jwgkVRtrNw6p5cxU5ms3_DvNay4MbXTpi1S; xf_push_notice_dismiss=1; em_cdn_uid=t%3D1617318034109%26u%3De550208089944f0a867f1331daccbfbd; xf_push_subscription_updated=1; xf_inlinemod_xfmg_album=1582; ai_user=UkJhS|2021-04-09T10:37:17.703Z; _webpushrEndPoint=https://fcm.googleapis.com/fcm/send/eDNLNLqC-CY:APA91bFt2XQ_qTrar8tL4PSftKs0pDJZCMJZK_fQpg7IOMxA6YYJNyQ5lSCBYp3zIWaqJsKgq6yu4gw4tFE7X9AqMwOF98VG_9dlgEfJ8itLuTOjPQT2LRG-X3OIHr7LlqdsY9QkggyJ; xf_emoji_usage=%3Afingers_crossed%3A%2C%3Athinking%3A; _gid=GA1.2.1498301638.1621844468; em_p_uid=l:1622667302281|t:1617318034611|u:59cab65ff28341d094747e9cc61701d7; xf_session=4IEJ8qD6pBpXV92d9gUBwVwUvpZpvbYX; __cf_bm=d4a430d600c908b3c1a07a3623142185ac341f01-1623010672-1800-AVn1mUY48a+4+hYFRJZ8INidxLo8L0EtT3UWk7FE+ACZwHa8WyeqxHAEbs2CIL9wplOvV31tonikQ0oeBTqMWaPh4JVGdmjJz8LvHBYOEpZAPWwOdHqGVS66LbE95jcbsg==; _gat_threadloomTracker=1; _gat_gtag_UA_9447998_1=1
referer: https://teslamotorsclub.com/tmc/threads/number-plates.230174/
sec-ch-ua: " Not;A Brand";v="99", "Google Chrome";v="91", "Chromium";v="91"
sec-ch-ua-mobile: ?0
sec-fetch-dest: empty
sec-fetch-mode: same-origin
sec-fetch-site: same-origin
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36

This bit seems odd to me:

expires: Thu, 01 Jan 1970 00:00:01 GMT

 

[MrBadger]

Thanks for that. They know what exactly is causing the vast majority of the incidents - there appears to be a bit of balancing act between site usability and security going on.

 

[tomorrowman]

Well I have started seeing the error message several times a day on my PC. Trying again tends to resolve it.

Typically when 1st trying to access a thread. Started at the weekend, had it about half a dozen times today

 

[Adopado]

I'm now in the "once or twice" club ...

 

[MrBadger]

I think it may be getting more frequent.

If it becomes a bother, you should be able to update your poll response. I'll extend it for another week although admin may have already taken a look.

For reference, current poll results are:

 

[Bantam]

Access denied
This website is using a security service to protect itself from online attacks.

Ray ID: 65c1363fbe48071a
Timestamp: 2021-06-08 09:49:44 UTC
Your IP address: 212.x.x.x
Requested URL: teslamotorsclub.com/tmc/threads/four-letter-supercharger-groups.230233/
Error reference number: 1020
Server ID: FL_21F446
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36 Edg/91.0.864.37

 

[Bluebell]

It has got significantly worse for me over the past couple of days.

 

[MrBadger]

A few more days left on the reopened poll. If you think its getting worse, can you please update your poll answer.

Current state of play. Still not an issue for most but some drift downwards showing that it may be getting worse.