23
7mon
14

More DDOS(?) traffic 19/5/25

We've seen some issues with AZ again today. On investigating it looks like more DDOS/abuse traffic from overseas. I've applied the same sort of block as last time we saw this, and things appear to have returned to normal..

The sharp drop is when the "attack" started, the jump is when it was blocked... the red line is blocked requests.

maniacalmanicmania - 7mon

Are the requests from a single source?

3
Lodion πŸ‡¦πŸ‡Ί - 7mon

IP? No. Country, ASN and user agent? Yes. Which now will receive a captcha.

8
eureka - 7mon

Could be a scraper? But it doesn't sound much like one if the user agent wasn't clear, or suspicious. A DoS attack would probably be making an odd request, intended to waste the most resources possible.

1
Zagorath - 7mon

I may have pissed off the users from that other Australian Lemmy instance today. I hope that didn't cause it.

1
TinyBreak - 7mon

There’s another instance?

3
maniacalmanicmania - 7mon

quokk.au maybe? Dunno.

2
Zagorath - 7mon

Oh shit. There are a few, apparently. No, I was referring to lemmy.net.au.

Only seems to have one particularly active user, and they're a (probably American) troll.

3
Nath - 7mon

Ha! We are not even the biggest instance in Australia. Nor are we the oldest or most used.

The biggest/oldest Australian instance I know of is Blahaj. While you can argue they're more global than Australian, I count them because 1. I am super proud of them and what they've built and 2. Ada is in Brisbane and active in our communities. πŸ˜€

2
Gorgritch_Umie_Killa - 7mon

I had no idea Blahaj was Australian run! Super interesting!

Are there any more Australian instances?

I suppose AZ was just the first to really dive in to fill that Australian communities niche in a somewhat organised way.

1
Lodion πŸ‡¦πŸ‡Ί - 7mon

Not from Australia.

3
example @reddthat.com - 7mon

that other Australian Lemmy instance

not referring to reddthat.com

smh

2
truxnell - 7mon

They probably had it comin

2
Lodion πŸ‡¦πŸ‡Ί - 7mon

Another web scraping bot blocked.

1
Lodion πŸ‡¦πŸ‡Ί - 7mon

So this is still going on now. I've expanded the block to catch more of the dodgy traffic.

1