Layer8 in Space

jbz😎 Open source devs are fighting AI crawlers with cleverness and vengeance —<a href="https://mstdn.social/@TechCrunch" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@TechCrunch</a> ｢ It’s intended to “slow down, confuse, and waste the resources of AI Crawlers and other bots that don’t respect ‘no crawl’ directives,” Cloudflare described in its blog post. Cloudflare said it feeds misbehaving AI crawlers “irrelevant content rather than extracting your legitimate website data.” ｣<a href="https://techcrunch.com/2025/03/27/open-source-devs-are-fighting-ai-crawlers-with-cleverness-and-vengeance/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://techcrunch.com/2025/03/27/open-source-devs-are-fighting-ai-crawlers-with-cleverness-and-vengeance/</a><a href="https://indieweb.social/tags/ddos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ddos</a> <a href="https://indieweb.social/tags/ai" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ai</a> <a href="https://indieweb.social/tags/aicrawlers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#aicrawlers</a> <a href="https://indieweb.social/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a>

EpiphytActivityPub is great to connect your WordPress blog to the Fediverse. However, depending on the activity, it is possible to create an accidental DDoS against the own server. […]<a href="https://epiph.yt/en/blog/2025/accidental-ddos-through-activitypub-plugin/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://epiph.yt/en/blog/2025/accidental-ddos-through-activitypub-plugin/</a><a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://epiph.yt/en/blog/tag/activitypub/" target="_blank">#ActivityPub</a> <a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://epiph.yt/en/blog/tag/cachify/" target="_blank">#Cachify</a> <a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://epiph.yt/en/blog/tag/caching/" target="_blank">#Caching</a> <a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://epiph.yt/en/blog/tag/ddos/" target="_blank">#DDoS</a> <a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://epiph.yt/en/blog/tag/fediverse/" target="_blank">#Fediverse</a> <a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://epiph.yt/en/blog/tag/plugin/" target="_blank">#Plugin</a> <a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://epiph.yt/en/blog/tag/surge/" target="_blank">#Surge</a> <a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://epiph.yt/en/blog/tag/wordpress/" target="_blank">#WordPress</a>

JordanI've seen a real uptick the past couple of days in attacks on my IP address space. Not sure if I'm being targeted, or part of a wider campaign. Oh well, fail2ban makes quick work of them 😸<a href="https://fosstodon.org/tags/selfhosted" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosted</a> <a href="https://fosstodon.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://fosstodon.org/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://fosstodon.org/tags/ddos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ddos</a> <a href="https://fosstodon.org/tags/cyberattack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cyberattack</a> <a href="https://fosstodon.org/tags/firewall" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#firewall</a> <a href="https://fosstodon.org/tags/fail2ban" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fail2ban</a> <a href="https://fosstodon.org/tags/subjam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#subjam</a>

Rachel RawlingsI'm having trouble figuring out what kind of botnet has been hammering our web servers over the past week. Requests come in from tens of thousands of addresses, just once or twice each (and not getting blocked by fail2ban), with different browser strings (Chrome versions ranging from 24.0.1292.0 - 108.0.5163.147) and ridiculous cobbled-together paths like /about-us/1-2-3-to-the-zoo/the-tiny-seed/10-little-rubber-ducks/1-2-3-to-the-zoo/the-tiny-seed/the-nonsense-show/slowly-slowly-slowly-said-the-sloth/the-boastful-fisherman/the-boastful-fisherman/brown-bear-brown-bear-what-do-you-see/the-boastful-fisherman/brown-bear-brown-bear-what-do-you-see/brown-bear-brown-bear-what-do-you-see/pancakes-pancakes/pancakes-pancakes/the-tiny-seed/pancakes-pancakes/pancakes-pancakes/slowly-slowly-slowly-said-the-sloth/the-tiny-seed(I just put together a bunch of Eric Carle titles as an example. The actual paths are pasted together from valid paths on our server but in invalid order, with as many as 32 subdirectories.)Has anyone else been seeing this and do you have an idea what's behind it?<a href="https://infosec.exchange/tags/botnet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#botnet</a> <a href="https://infosec.exchange/tags/ddos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ddos</a> <a href="https://infosec.exchange/tags/webscraping" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webscraping</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

Dissent Doe :cupofcoffee:So apart from the attempt to open a lot of Facebook accounts using my domain, my site has also been under sporadic DDoS attacks. I hope you don't have too much trouble connecting at times. And no, I have no idea who I ticked off now. 😂 <a href="https://infosec.exchange/tags/DDoS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DDoS</a>

AAKLSales pitch toward the end.Akamai: DDoS Attack Trends in 2024 Signify That Sophistication Overshadows Size <a href="https://www.akamai.com/blog/security/ddos-attack-trends-2024-signify-sophistication-overshadows-size" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.akamai.com/blog/security/ddos-attack-trends-2024-signify-sophistication-overshadows-size</a> <a href="https://bird.makeup/users/akamai_research" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@akamai_research</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/DDoS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DDoS</a>

Erik C. ThauvinDNS Attacks – Explained<a href="https://mastodon.social/tags/ddos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ddos</a> <a href="https://mastodon.social/tags/dns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dns</a> <a href="https://mastodon.social/tags/java" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#java</a><a href="https://svenruppert.com/2025/04/07/dns-attacks-explained/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://svenruppert.com/2025/04/07/dns-attacks-explained/</a>

Jure Repinc :linux: :kde:<a href="https://toot.si/@kompot" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@kompot</a> Just a little thought I had in relation to this. Would it make any sense to report these DDoS attacks to national CERT authorities, e.g. <a href="https://ioc.exchange/@sicert" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@sicert</a> here in Slovenia?<a href="https://mstdn.io/tags/DDoS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DDoS</a> <a href="https://mstdn.io/tags/Internet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Internet</a> <a href="https://mstdn.io/tags/LLM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LLM</a> <a href="https://mstdn.io/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a> <a href="https://mstdn.io/tags/CERT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CERT</a> <a href="https://mstdn.io/tags/DenialOfService" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DenialOfService</a>

LinuxNews.deNachdem diverse <a href="https://social.anoxinon.de/tags/ki" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ki</a> <a href="https://social.anoxinon.de/tags/ai" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ai</a> <a href="https://social.anoxinon.de/tags/crawler" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#crawler</a> besonders respektvoll mit den öffentlichen Ressourcen von Open Source Projekten umgehen, habe ich mich dazu entschlossen eben diese auszusperren. Wir hatten in der Vergangenheit crawls, die im <a href="https://social.anoxinon.de/tags/monitoring" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#monitoring</a> als <a href="https://social.anoxinon.de/tags/ddos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ddos</a> gewertet wurden. Diverse AS erfreuen sich nun einem dauerhaften 429, einige wenige die es für alle kaputt machen…

Kevin Karhan :verified:<a href="https://corteximplant.com/@Prozak" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@Prozak</a> <a href="https://fediscience.org/@seanfobbe" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@seanfobbe</a> Lets say <a href="https://social.anoxinon.de/@Codeberg" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@Codeberg</a> did suffer some serious <a href="https://infosec.space/tags/DDoS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DDoS</a> (which OFC isn't their fault) so I'd rather see <a href="https://infosec.space/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SelfHosting</a> as a better option...<ul><li>Needless to say I'm likely considering as a <a href="https://infosec.space/tags/public" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#public</a> <a href="https://infosec.space/tags/mirror" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mirror</a> / <a href="https://infosec.space/tags/public" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#public</a> <a href="https://infosec.space/tags/git" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#git</a> once I'd actually change my setups.</li></ul>It's just.currently.not.my.priority, but *my.priorities.ain't authoritative...

Kevin Karhan :verified:<a href="https://fediscience.org/@seanfobbe" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@seanfobbe</a> personally I'd consider <a href="https://infosec.space/tags/gitea" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#gitea</a> and <a href="https://infosec.space/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SelfHosting</a>.<ul><li>As of now I abude <a href="https://infosec.space/tags/github" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#github</a> as free, <a href="https://infosec.space/tags/DDoS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DDoS</a>-protected hosting and something <a href="https://infosec.space/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft</a> burns money in.</li></ul>Once any of my projects would gain traction I'd move from there away.<ul><li>I just am not a huge fan of <a href="https://social.anoxinon.de/@Codeberg" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@Codeberg</a> even tho they are a better option.</li></ul>I jist move to either SelfHosting or nowhere...

Haack’s NetworkingManaging AI Bots+ w/ Apache MPM, FPM, & Fail2Ban: <a href="https://tech.haacksnetworking.org/2025/04/06/managing-ai-bots-w-apache-mpm-fpm-fail2ban/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://tech.haacksnetworking.org/2025/04/06/managing-ai-bots-w-apache-mpm-fpm-fail2ban/</a> There's been a lot of continued discussion on this topic, so I decided to investigate some of the common reports, compare those to my own hardware, theoretical ceilings and caps, and then adjusted my LAMP stack and fail2ban as per this blog entry. Let me know what yall think or if you find any errors or questionable claims. -oemb1905 <a href="https://gnulinux.social/tags/ai" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ai</a> <a href="https://gnulinux.social/tags/scraping" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scraping</a> <a href="https://gnulinux.social/tags/apache" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#apache</a> <a href="https://gnulinux.social/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://gnulinux.social/tags/freesoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#freesoftware</a> <a href="https://gnulinux.social/tags/floss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#floss</a> <a href="https://gnulinux.social/tags/ddos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ddos</a> <a href="https://gnulinux.social/tags/php" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#php</a>

spla :senyera: :vim:Estic pensant en fer la prova del cotó, muntar un servidor <a href="https://mastodont.cat/tags/Forgejo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Forgejo</a> nou a veure si els bots de les <a href="https://mastodont.cat/tags/IA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IA</a> el troben i el tomben a peticions (com un vulgar <a href="https://mastodont.cat/tags/DDOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DDOS</a>) tal i com va passar amb el servidor Forgejo que teníem a mastodont.cat i d'altres.

Edwin G. :mapleleafroundel:Distributed denial of service (DDoS) attacks in 2024 at OVH. <a href="https://blog.ovhcloud.com/a-brief-retrospective-of-network-layer-ddos-attacks-in-2024-at-ovhcloud/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://blog.ovhcloud.com/a-brief-retrospective-of-network-layer-ddos-attacks-in-2024-at-ovhcloud/</a> - - - Attaques de déni de service distribuées (DDoS) en 2024 chez OVH. // Publication en anglais //<a href="https://mstdn.moimeme.ca/tags/OVH" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OVH</a> <a href="https://mstdn.moimeme.ca/tags/OVHcloud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OVHcloud</a> <a href="https://mstdn.moimeme.ca/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://mstdn.moimeme.ca/tags/Cybers%C3%A9curit%C3%A9" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersécurité</a> <a href="https://mstdn.moimeme.ca/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://mstdn.moimeme.ca/tags/DDoS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DDoS</a>

Kevin Karhan :verified:<a href="https://em.erge.to/users/LunaDragofelis" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@LunaDragofelis</a> Consider <a href="https://infosec.space/tags/blackholing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#blackholing</a> entire <a href="https://infosec.space/tags/ASN" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ASN</a>|s like <a href="https://infosec.space/tags/aws" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#aws</a> and all the ofther <a href="https://infosec.space/tags/GAFAMs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GAFAMs</a> instead.<ul><li>It's the only way to stop these <a href="https://infosec.space/tags/DDoS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DDoS</a> attacks!</li></ul><a href="https://www.youtube.com/watch?v=Hi5sd3WEh0c" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.youtube.com/watch?v=Hi5sd3WEh0c</a>

vascorsd«There’s been something of an epidemic of malicious bots on the internet these days. You may have seen a post recently titled “Please stop externalizing your costs directly into my face“, or “FOSS infrastructure is under attack by AI companies“. Those are all happening to us, too. Surprise.»TCRF has been getting DDoSed – Xkeeper's blog - <a href="https://blog.xkeeper.net/uncategorized/tcrf-has-been-getting-ddosed/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://blog.xkeeper.net/uncategorized/tcrf-has-been-getting-ddosed/</a><a href="https://mastodon.social/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a> <a href="https://mastodon.social/tags/AIShit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AIShit</a> <a href="https://mastodon.social/tags/AIPocalypse" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AIPocalypse</a> <a href="https://mastodon.social/tags/DDoS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DDoS</a> <a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a>

Camelia :tranarchy_a_nonbinary: 🇵🇸I'm getting <a href="https://tech.lgbt/tags/DDOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DDOS</a>-ed by <a href="https://tech.lgbt/tags/AIcrawlers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AIcrawlers</a> right now, even though I have a strict robots.txt.Outgoing traffic suddenly increased (more or less 10 times regular traffic).I have to block their crap using my firewall. That's NOT OK.<a href="https://tech.lgbt/tags/LLMCrawlers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LLMCrawlers</a> <a href="https://tech.lgbt/tags/StopAI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#StopAI</a>

Venkatesh-Prasad RanganathAn interesting code hosting related downside of AI. <a href="https://mastodon.social/tags/ai" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ai</a> <a href="https://mastodon.social/tags/ddos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ddos</a> <a href="https://mastodon.social/tags/web" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#web</a> <a href="https://mastodon.social/tags/scraping" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scraping</a> <a href="https://mastodon.social/tags/copyright" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#copyright</a> <a href="https://mastodon.social/tags/code" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#code</a><a href="https://techcrunch.com/2025/03/27/open-source-devs-are-fighting-ai-crawlers-with-cleverness-and-vengeance/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://techcrunch.com/2025/03/27/open-source-devs-are-fighting-ai-crawlers-with-cleverness-and-vengeance/</a>

Esther MenhardDaten-hungrige KI-Bots zwingen (versehentlich) <a href="https://openbiblio.social/tags/foss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#foss</a> Websites in die Knie <a href="https://openbiblio.social/tags/ki" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ki</a> <a href="https://openbiblio.social/tags/ai" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ai</a> <a href="https://openbiblio.social/tags/ddos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ddos</a> <a href="https://openbiblio.social/tags/crawler" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#crawler</a> <a href="https://arstechnica.com/ai/2025/03/devs-say-ai-crawlers-dominate-traffic-forcing-blocks-on-entire-countries/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://arstechnica.com/ai/2025/03/devs-say-ai-crawlers-dominate-traffic-forcing-blocks-on-entire-countries/</a>

Kevin Karhan :verified:<a href="https://mastodon.social/@bagder" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@bagder</a> seriously, wtf?This is a <a href="https://infosec.space/tags/DDoS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DDoS</a> attack...

Recent searches

Search options

Administered by:

Server stats:

#ddos