We were getting DDoS’d by a bunch of South American IPs (mostly Brazilian) from maybe 18 hours ago.
What is happening?
Submitted 4 days ago by ekZepp@lemmy.world to fediverse@lemmy.world
https://lemmy.world/pictrs/image/2adbbd32-5f60-47a1-9a26-ae6c169530aa.jpeg
Comments
chrisbit@leminal.space 4 days ago
0_o7@lemmy.dbzer0.com 4 days ago
Were they residential IP addresses? I had this a couple weeks back. But it wasn’t just Brazil, constant hits from Argentina and few other countries. Tried different things but they were all unique residential addresses and hard to block, then set up challenge for the whole continent. Finally, it went down.
chrisbit@leminal.space 4 days ago
Yeah, same story - the few I looked at looked like they were from consumer ISPs. We had ~7m requests from Brazil, ~900k from Argentina, and a little less from Ecuador, Colombia and Russia.
Blaze@lemmy.zip 4 days ago
ekZepp@lemmy.world 4 days ago
I mean, i don’t use those other istances so maybe is just a coincidence.
artyom@piefed.social 4 days ago
Occam’s Razor says AI
daniskarma@lemmy.dbzer0.com 4 days ago
It seems that there has been a massive short lived ddos attack all over the web.
There have been several in the later years. Sone of them are linked to a botnet called AISURU that it’s supposedly infected millions of devices worldwide.
FaceDeer@fedia.io 4 days ago
No, that's what the common prejudices about the popular whipping boy of the moment says.
DaMummy@lemmy.world 1 day ago
It was my fault. Happened shorty after I joined lemmy. Sorry everyone.
ekZepp@lemmy.world 4 days ago
Is just heavy traffic?
Eldritch@piefed.world 4 days ago
What's Ralph Bakshi gotta do with it?
My money is on heavy scraping.
confuser@lemmy.zip 4 days ago
that is ddos in a nutshell, but people are speculating the causes
bizarroland@lemmy.world 4 days ago
There’s a really large DDOS attack going on right now, uh, Lemme could be getting caught up in it, somehow.
9limmer@lemmy.zip 4 days ago
Yikes!
techradar.com/…/cloudflare-says-it-has-once-again…
ekZepp@lemmy.world 4 days ago
Holy shit. But it lasted only 40 seconds… This smell like a field test for something worse.
slazer2au@lemmy.world 4 days ago
When isn’t there one going?
bizarroland@lemmy.world 4 days ago
I mean, yes, but this one is really huge. I think it’s in the trillions of source nodes, if I understand the blurb I saw about it.
poVoq@slrpnk.net 4 days ago
“Somehow”… seems to be caused by using centralized MitM Clownflare that supposedly protects against DDOS 🙄