Post #1727427

2026-04-27 12:13 UTC

Ooh, so CDM is now weeks into a pretty ugly DDOS -- standing up to it but each time I block an IP, it hops to a new one. Just hitting GET for every single file. If anyone in my friends list is particularly adept with this on nginx, I&#39;m all ears!

Replies (3)

@shtrom@piaille.fr 2026-04-27 12:28

@pkirn@mastodon.social I had this https://evilgeniusrobot.uk/posts/a-simple-bot-gatekeeper-for-nginx.html in my bookmarks. Not tested, but sounds promising.

Open ##2413884
@wissotsky@kolektiva.social 2026-04-27 12:29

@pkirn@mastodon.social If they swap the proxy IP address only after it gets blocked/denied maybe you could tarpit it or respond with random data

Open ##2413885
@grumpyoldtechie@hostux.social 2026-04-27 13:16

@pkirn@mastodon.social Your'e unfortunately playing wack-a-mole whatever you do. I don't have links handy right now but nginx bad bot blocker has served me well. Have a look which countries the bots come from and block or challenge those. Block cloud service Ip ranges, Google cloud and Huawei cloud are the biggest offenders. I use Cloudflare and nginx on FreeBSD so I can give more info on those if you want. I reduced 200k hits a day to a sane 1k hits on my niche family site

Open ##2413886