Hi guys,

Another ddos attack so site was slow/unavailable for a while.

I disabled the alternative user interfaces since they are used in the attacks. Will think of some better long term solutions. πŸ₯Š πŸ˜„

all 14 comments

sorted by: hot top controversial new old
[–] 13 points 1 year ago (5 children)

Man this sucks. What kind of dickweed DDoSs a lemmy instance? Hope this isn’t causing too much trouble for you.

  • source
  • hideshow 5 child comments
  • [–] [S] 7 points 1 year ago (2 children)

    Its alright but I also dont know what the point is. Its not like the hundreds of lemmy instances is going anywhere. We are all here to stay around and offer an alternative to big tech platforms. They can ddos a few of us but not all.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 1 year ago* (last edited 1 year ago) (1 child)

    Could be random user just doesn't like some other random user with this as their home instance. They don't know the user's IP address, but do know the home instance's and so decided that a way to attack them would be to DDoS the home instance.

    IRC had people DoSing other users (and even servers) as part of people getting in fights there.

    Thanks for looking into it, @mrmanager@lemmy.today.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 0 points 1 year ago

    This makes a lot of sense! I personally have had my own little stalkers (there was a guy who created an entire bot army to go against me, got called out on it, then disappeared lol) on here because people just can't go outside and touch grass sometimes. So your scenario wouldn't surprise me at all. lol

  • source
  • parent
  • [–] 8 points 1 year ago (1 child)

    The foss world has been getting hit by either targeted DDOS or crippled by LLM scraping for months now. Fingers crossed you weather the storm.

  • source
  • hideshow 1 child comment
  • [–] 7 points 1 year ago (1 child)

    Sorry to hear that's been happening! I hope they leave you guys alone now.

  • source
  • hideshow 1 child comment
  • [–] 2 points 1 year ago (1 child)

    for old lemmy (MLMYM) are you using the fedihosting-foundation fork? the original isn't maintained, I wonder if there's a vulnerability in it?

  • source
  • hideshow 1 child comment
  • [–] 2 points 1 year ago (1 child)

    Sadly it's been my experience that once this crap starts it doesn't stop and engaging some kind of protection upstream from the host eventually becomes necessary. I've used Cloudflare's DDoS protection and / or WAF for this in the past but I know that not everybody wants to work with them.

  • source
  • hideshow 1 child comment