We were getting DDoS’d by a bunch of South American IPs (mostly Brazilian) from maybe 18 hours ago.
What is happening?
Submitted 1 month ago by ekZepp@lemmy.world to fediverse@lemmy.world
https://lemmy.world/pictrs/image/2adbbd32-5f60-47a1-9a26-ae6c169530aa.jpeg
Comments
chrisbit@leminal.space 1 month ago
0_o7@lemmy.dbzer0.com 1 month ago
Were they residential IP addresses? I had this a couple weeks back. But it wasn’t just Brazil, constant hits from Argentina and few other countries. Tried different things but they were all unique residential addresses and hard to block, then set up challenge for the whole continent. Finally, it went down.
chrisbit@leminal.space 1 month ago
Yeah, same story - the few I looked at looked like they were from consumer ISPs. We had ~7m requests from Brazil, ~900k from Argentina, and a little less from Ecuador, Colombia and Russia.
Blaze@lemmy.zip 1 month ago
ekZepp@lemmy.world 1 month ago
I mean, i don’t use those other istances so maybe is just a coincidence.
artyom@piefed.social 1 month ago
Occam’s Razor says AI
daniskarma@lemmy.dbzer0.com 1 month ago
It seems that there has been a massive short lived ddos attack all over the web.
There have been several in the later years. Sone of them are linked to a botnet called AISURU that it’s supposedly infected millions of devices worldwide.
FaceDeer@fedia.io 1 month ago
No, that's what the common prejudices about the popular whipping boy of the moment says.
ekZepp@lemmy.world 1 month ago
Is just heavy traffic?
Eldritch@piefed.world 1 month ago
What's Ralph Bakshi gotta do with it?
My money is on heavy scraping.
confuser@lemmy.zip 1 month ago
that is ddos in a nutshell, but people are speculating the causes
DaMummy@lemmy.world 1 month ago
It was my fault. Happened shorty after I joined lemmy. Sorry everyone.
bizarroland@lemmy.world 1 month ago
There’s a really large DDOS attack going on right now, uh, Lemme could be getting caught up in it, somehow.
9limmer@lemmy.zip 1 month ago
Yikes!
techradar.com/…/cloudflare-says-it-has-once-again…
ekZepp@lemmy.world 1 month ago
Holy shit. But it lasted only 40 seconds… This smell like a field test for something worse.
slazer2au@lemmy.world 1 month ago
When isn’t there one going?
bizarroland@lemmy.world 1 month ago
I mean, yes, but this one is really huge. I think it’s in the trillions of source nodes, if I understand the blurb I saw about it.
poVoq@slrpnk.net 1 month ago
“Somehow”… seems to be caused by using centralized MitM Clownflare that supposedly protects against DDOS 🙄