Elektrine lite

← Feed

@Codeberg@social.anoxinon.de

Post #2836438

2025-08-15 16:49 UTC

We have a list of explicitly blocked IP ranges. However, a configuration oversight on our part only blocked these ranges on the "normal" routes. The "anubis-protected" routes didn't consider the challenge. It was not a problem while Anubis also protected from the crawlers on the other routes. However, now that they managed to break through Anubis, there was nothing stopping these armies. It took us a while to identify and fix the config issue, but we're safe again (for now).

Replies (4)

  • @Codeberg@social.anoxinon.de 2025-08-15 16:52

    For the load average auction, we offer these numbers from one of our physical servers. Who can offer more? (It was not the "wildest" moment, but the only for which we have a screenshot)

    Open ##2836439

  • @rotnroll666@mastodon.social 2025-08-15 16:53

    @Codeberg@social.anoxinon.de Great thread and explanation. Thank you.

    Open ##2836497

  • @usul@piaille.fr 2025-08-15 16:53

    @Codeberg@social.anoxinon.de #opshugs

    Open ##2836498

  • @Codeberg@social.anoxinon.de >now that they managed to break through Anubis There was no break - it's a simple matter of changing the useragent, or if for some reason there's still a challenge, simply utilizing the plentiful computing power that is available on their servers (which far outstrips the processing power mobile devices have). Anubis is evil and is proprietary malware - please do not attack your users with proprietary malware. If you want to stop scraper bots, start serving GNUzip bombs - you can't scrape when your server RAM is full. dd if=/dev/zero bs=1G count=10 | gzip > /tmp/10GiB.gz dd if=/dev/zero bs=1G count=100 | gzip > /tmp/100GiB.gz dd if=/dev/zero bs=1G count=1025 | gzip > /tmp/1TiB.gz nginx; #serve gzip bombs location ~* /bombs-path/.*\.gz { add_header Content-Encoding "gzip"; default_type "text/html"; } #serve zstd bombs location ~* /bombs-path/.*\.zst { add_header Content-Encoding "zstd"; default_type "text/html"; } Then it's a matter of bait links that the user won't see, but bots will.

    Open ##2836499