63
Bots overloading old.lemmy.today (lemmy.today)
submitted 3 months ago by to c/lemmytoday@lemmy.today
61 comments fedilink hide all child comments
 

Hi,

We had a DDOS attack against old.lemmy.today which overloaded the entire server for about 20 minutes. I had to turn off old.lemmy.today temporarily and will look through logs and probably block more chinese ip ranges, since thats where it came from.

Always something to do. :) Keeping this as sticky for a while to inform everyone.

Edit: I added more ip blocks for Chinese networks and hopefully it will keep future bots away. Bringing up the old.lemmy.today user interface again...

Edit 2: Had to take it down again due to massive bot scraping. Currently down.

Edit 3: Decided to require login for old.lemmy.today instead of using anubis.

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 3 months ago (8 children)

Look into pow protection. The Chinese botnets come from a practically infinite range at the moment

  • permalink
  • fedilink
  • source
  • hideshow 8 child comments
    •
  • [–] [S] 4 points 3 months ago (7 children)

    Thank you, I was reading about pow protection and finding out more about it. Is there some local software you could recommend? I'm not too hot on cloudflare or other big tech services unless absolutely needed.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 4 points 3 months ago (6 children)

    What is your reverse proxy software?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] [S] 3 points 3 months ago (5 children)

    Just nginx.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 4 points 3 months ago (4 children)

    You can look into Anubis then.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] [S] 2 points 3 months ago* (2 children)

    I added Anubis for https://old.lemmy.today/ and will see if it helps the situation. Bots are hammering it pretty hard but they are not getting any lemmy content at least. Thank you for your advice. :)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •