Yay! Or maybe AIEEE! Seems like I'm giving a talk at #EuroBSDCon again this year!

Anyone who has been following me here for a while will know I'm a hopeless #retrocomputing nerd, and I will make no attempt at hiding it during my talk:

Dirty Tricks: Using nginx and Lua to thwart bots and skript kiddies

I'll (try to) show how you can protect your #BBS from drive-by portscans and your production systems from #DDoS attacks using all the wrong tools.

Dietary warning: may contain traces of floppies.

https://events.eurobsdcon.org/2025/talk/review/RHDFBQWZEVC833T3WDLDEXYFQVRWJKMN #FreeBSD #BSD #Unix #DOS #RunBSD

@MikeImBack no, just being hammered by scrapers aka. #DDoS'd!

Cloudflare autonomously mitigated a record-breaking 7.3 Tbps DDoS attack targeting a hosting provider. The multivector UDP flood hit 21k+ ports in 45 seconds, showcasing evolving threat scale and the need for robust volumetric defense.

https://blog.cloudflare.com/defending-the-internet-how-cloudflare-blocked-a-monumental-7-3-tbps-ddos/

This mega DDoS attack broke all records - huge 37.4TB bombardment in 45 seconds against a single victim is the largest ever recorded

https://www.techradar.com/pro/security/this-mega-ddos-attack-broke-all-records-huge-37-4tb-bombardment-in-45-seconds-against-a-single-victim-is-the-largest-ever-recorded

Banks are under fire. A new report shows a sharp rise in sophisticated DDoS attacks targeting financial institutions worldwide hitting APIs, websites, and entire networks.

Read: https://hackread.com/sophisticated-ddos-campaigns-crippling-global-banks/

My new #DDoS book "DDoS: Understanding Real-Life Attacks and Mitigation Strategies" is now also available as an eBook!

Check it out here: https://ddos-book.com/

I’ve packed in everything I’ve learned from defending major German government sites against groups like Anonymous, Killnet, and NoName057(16).

It covers mitigations against #AI #crawlers and many other defenses for all network layers.

If you find it useful, I’d love it if you could boost and share to help more people defend themselves.

Thank you!

Attention server admins! Yesterday I've read a post by @simon_brooke how nasty AI scraper bots are attacking his self-hosted @forgejo instance. Soon after I'm seeing unusual, periodic traffic spikes on mine and again - dominated by OpenAI, but some other freeloaders too:

20.171.207.41   GPTBot/1.2
85.208.96.211   SemrushBot/7~bl
54.36.148.64    AhrefsBot/7.0
114.119.139.53  PetalBot

With GPTBot and SemrushBot attacking hardest

They've been hammering my little server periodically today as well, slowing down my instance dramatically as if I was experiencing malicious DDoS attack Well, in a sense it is one

Watch out - it seems corporate AI techbros learned to scrape content and starts doing it on a massive scale Remember when @Codeberg was (and repeatedly is) hit?

For now blocked IP ranges and User-Agent combinations, not sure for how long that will be enough

Please boost for visibility and be prepared!

DDoS incident disrupts internet for thousands in Moscow

｢ The attack, first detected on Tuesday, continued into Friday, disrupting ASVT’s mobile app, website and customer accounts. The provider serves mainly large residential complexes, where residents reported being unable to work remotely, pay at local shops using card terminals, or access their buildings due to disabled internet-based intercom systems ｣

https://therecord.media/moscow-internet-provider-asvt-ddos-attack

Unfortunately the #OpenStreetMap wiki is very slow today. We are fighting an aggressive web scraper bot. 10,000 of IPs involved. Randomised User-Agent. Ignoring robots.txt #aibot #ddos

Update: Fixed. We've been able to mitigate the bot traffic. #fail2ban

Pretty much the only regions on the planet from which we *don't* see regular volumetric DDOS against www.bbc.co.uk & www.bbc.com is central Africa & the poles.

This is map shows the number of time each country was a DDOS traffic source in the last 30 days (larger circles == more DDOS attacks).

The botnets are really well globally distributed these days (and we typically see thousands or tens of thousands of source IPs per attack - mostly compromised servers).

Add this to the list of ADDITIONAL REASONS I hate AI.

They're absolutely slamming websites on the Internet so they can suck the contents into their great big training databases.

https://mastodon.social/@tdp_org/114501075084619358

Сервер ддосят с подсетей 47.79.aa.bb и 47.82.cc.dd, они использовали мой инстанс LiteXiv для скрейпинга Pixiv без задержки между запросами и заполнили все доступные порты.

Подсети заблокировал на уровне фаерволла. LiteXiv запустил.

After I published a recent article where I showed how to mitigate an accidental DDoS after enabling ActivityPub for WordPress with the Surge plugin, I found an optimization for improved cache handling. Out of the box, there’s a problem with the default configuration since Surge ignores the Accept header.

[…]

https://epiph.yt/en/blog/2025/optimize-surge-configuration-for-activitypub/

The NRC-newspaper is down because of a DDoS attack. Highly likely it is the "NoName057(16)" group, probably sponsored and directed by Russia.
#NRC #DDoS #cybersecurity #Netherlands #newspaper #Russia #geopolitics @geopolitics #Noname057(16)