A user with the email criansari3@gmail.com (IP: 67.190.30.191) has been attacking our Firebase database relentlessly for weeks now. Since the new year, attacks have ramped up to cost $1.75/day to keep the database online. Being that Chattable is a free project funded by my own paycheck, this is unsustainable.
I have reached out to Firebase, the attacker has been jumping VPNs since their home IP was leaked. Firebase won't do anything, Firebase also can't be looped through cloudfare, the server is fine but the database is hosted by Firebase which offers no spam protection
The only real option is to prevent the public from reading chat data directly from the database and loop all read requests through my server. I did this with writes when I switched to a backend. So expect a similar amount of downtime since then
Hmmm. You could 1) Firebase App Check. A good way to block scripts/bots regardless of their VPN 2) Backend Proxy. Moving reads to your backend, and then you could use Cloudfare Free Bot Shield 3) UID Ban in Rules. Hardcode a "deny" in your security rules? Firebase wont charge for requests blocked by rules.
The following steps will be to migrate from Firebase and fully host the database on my server. Bear with me, as it will be a lengthy process leaving Firebase. If you need any data (chat data or account data) from our database (or want it removed) email us
The database will remain down until further notice.
Cloudflare an option you're open to? I know their free plan has ddos protection.
Also, Discord?
NOOO I was just planning to add a chatbox :<
Have you reached out to Google/Firebase on the matter? Can't you ban their IP/email?
I have reached out to Firebase, the attacker has been jumping VPNs since their home IP was leaked. Firebase won't do anything, Firebase also can't be looped through cloudfare, the server is fine but the database is hosted by Firebase which offers no spam protection
The only real option is to prevent the public from reading chat data directly from the database and loop all read requests through my server. I did this with writes when I switched to a backend. So expect a similar amount of downtime since then
Hmmm. You could 1) Firebase App Check. A good way to block scripts/bots regardless of their VPN 2) Backend Proxy. Moving reads to your backend, and then you could use Cloudfare Free Bot Shield 3) UID Ban in Rules. Hardcode a "deny" in your security rules? Firebase wont charge for requests blocked by rules.
* This Immovable Object Must Be: Terminated * I Don't Have Any Cages LMAO
I thought I messed up my code, but it's apparently broken on all of chattable? I hope this issue will be resolved soon, good luck!
Can someone please explain to me why, WHY is someone attacking a free chat tool FOR WEEKS? Hope you can sort this out soon :/
The following steps will be to migrate from Firebase and fully host the database on my server. Bear with me, as it will be a lengthy process leaving Firebase. If you need any data (chat data or account data) from our database (or want it removed) email us