Forgejo

310 readers

21 users here now

This is a community dedicated to Forgejo.

Useful links:

Rules:

Posts must be relevant to Forgejo
No NSFW content
No hate speech, bigotry, etc
Try to keep discussions on topic
No spam of tools/companies/advertisements
It’s ok to post your own stuff part of the time, but the primary use of the community should not be self-promotion.

founded 2 years ago

MODERATORS

alx@programming.dev

Anyone else seeing DDoS-like traffic? (lemmy.zip)

submitted 15 hours ago by treadful@lemmy.zip to c/forgejo@programming.dev

13 comments fedilink hide all child comments

My instance is getting pummeled by scrapers crawling nonsense. Like issue and pull searches with every single variant of label combinations.

Everything's coming from a shitload of different residential IPs at a very fast cadence.

There's just not that much content on my instance to warrant this traffic. It could be scraped in a minute or two like this if it were legitimate traffic.

you are viewing a single comment's thread
view the rest of the comments

[–] treadful@lemmy.zip 1 points 15 hours ago (1 children)

Having a private instance isn't exactly indicative to open source software, so I don't think that's the way I want to take it. I'd probably move to Codeberg or even GitHub before hosting the entire thing on a private net.

I also don't think monitoring and blocking are going to help here. This traffic came from so many different IPs that it would be almost impossible to detect and block them all without blocking legitimate traffic. I also really don't want to hook up a Cloudflare-like centralized challenge system to deal with this if I can avoid it.

[–] reluctant_squidd@lemmy.ca 2 points 15 hours ago (1 children)

It sounds to me like you are at the mercy of the bots then unfortunately. I have had literal empty websites up just to see what the bots do and within a few hours the sites are hammered with crazy bot traffic trying everything from MySQL connections, ssh, Wordpress sniffing, xss attacks, you name it. They don’t even seem to care that the site is 403 forbidden or just a blank page.

It’s the World Wide Web we live in nowadays according to my experience.

[–] treadful@lemmy.zip 3 points 15 hours ago

[...] crazy bot traffic trying everything from MySQL connections, ssh, Wordpress sniffing, xss attacks, you name it.

oh yeah, I see that on everything. I'm not so worried about those vuln scanners than this overwhelming nonsense traffic that I'm seeing now. This is different, and seemingly pointless.