We were getting DDoS’d by a bunch of South American IPs (mostly Brazilian) from maybe 18 hours ago.
What is happening?
Submitted 4 weeks ago by ekZepp@lemmy.world to fediverse@lemmy.world
https://lemmy.world/pictrs/image/2adbbd32-5f60-47a1-9a26-ae6c169530aa.jpeg
Comments
chrisbit@leminal.space 4 weeks ago
0_o7@lemmy.dbzer0.com 4 weeks ago
Were they residential IP addresses? I had this a couple weeks back. But it wasn’t just Brazil, constant hits from Argentina and few other countries. Tried different things but they were all unique residential addresses and hard to block, then set up challenge for the whole continent. Finally, it went down.
chrisbit@leminal.space 4 weeks ago
Yeah, same story - the few I looked at looked like they were from consumer ISPs. We had ~7m requests from Brazil, ~900k from Argentina, and a little less from Ecuador, Colombia and Russia.
Blaze@lemmy.zip 4 weeks ago
ekZepp@lemmy.world 4 weeks ago
I mean, i don’t use those other istances so maybe is just a coincidence.
artyom@piefed.social 4 weeks ago
Occam’s Razor says AI
daniskarma@lemmy.dbzer0.com 4 weeks ago
It seems that there has been a massive short lived ddos attack all over the web.
There have been several in the later years. Sone of them are linked to a botnet called AISURU that it’s supposedly infected millions of devices worldwide.
FaceDeer@fedia.io 4 weeks ago
No, that's what the common prejudices about the popular whipping boy of the moment says.
ekZepp@lemmy.world 4 weeks ago
Is just heavy traffic?
Eldritch@piefed.world 4 weeks ago
What's Ralph Bakshi gotta do with it?
My money is on heavy scraping.
confuser@lemmy.zip 4 weeks ago
that is ddos in a nutshell, but people are speculating the causes
DaMummy@lemmy.world 3 weeks ago
It was my fault. Happened shorty after I joined lemmy. Sorry everyone.
bizarroland@lemmy.world 4 weeks ago
There’s a really large DDOS attack going on right now, uh, Lemme could be getting caught up in it, somehow.
9limmer@lemmy.zip 4 weeks ago
Yikes!
techradar.com/…/cloudflare-says-it-has-once-again…
ekZepp@lemmy.world 4 weeks ago
Holy shit. But it lasted only 40 seconds… This smell like a field test for something worse.
slazer2au@lemmy.world 4 weeks ago
When isn’t there one going?
bizarroland@lemmy.world 4 weeks ago
I mean, yes, but this one is really huge. I think it’s in the trillions of source nodes, if I understand the blurb I saw about it.
poVoq@slrpnk.net 4 weeks ago
“Somehow”… seems to be caused by using centralized MitM Clownflare that supposedly protects against DDOS 🙄