Elektrine lite

← Feed

@doctormo@floss.social

Post #3441802

2026-06-28 05:01 UTC

I'm going to sleep. If anyone is wondering why the #inkscape website is down, it's because it's being crushed by AI bots again, so I've taken it offline. I tried to put in more ip-blocks, and then tried to install Anubis. But I'm not a sysadmin and so this is just taking time to do. Can't do much of it tonight (this morning) so I'm afraid it's staying offline.

Replies (28)

  • @zazzoo@mstdn.ca 2026-06-28 05:55

    @doctormo@floss.social When individuals do this it's called a DDoS attack, when AI companies do it it's called a business model.

    Open ##3441800

  • @ilooo@systemli.social 2026-06-28 13:14

    @doctormo@floss.social Together with collegues I started an online survey about the open web and the AI crawler pandemic. We ask Sysadmins about the issue and its effects. The more participate, the better the picture! Hosted at University of Innsbruck: https://umfrage.uibk.ac.at/limesurvey/allgemein/898996?lang=en

    Open ##3457954

  • @doctormo@floss.social Must be frustrating. You don't deserve this kind of treatment

    Open ##3474222

  • @alienghic@timeloop.cafe 2026-06-28 05:12

    @doctormo@floss.social My current hack is I know there's some urls on my website that are dynamic enough the scrapers love searching them, but real people shouldn't be that interested. grep -E "suspicious|url|patterns" /var/log/apache2/access.log | cut -f 1 -d ' ' | asncounter --output-format tsv --top 4000 --no-asn -o /tmp/scum.tsv asncounter groups ip addresses by network so it restricts the trick of using a bunch of proxies on residential networks. Then I wrote a small program to select records out of scum.tsv and feed them to fail to ban like this, fail2ban-client set apache-noscript banip 117.188.0.0/20 1.80.0.0/13 180.72.0.0/14 ... Fail to ban will expire a ban after awhile, and I've got it set to increase the ban time for multiple hits. And then I kept doing that every morning, and some network bans kept getting increased. Just make sure to exclude your administrative ip address. And the AI companies cannot die soon enough.

    Open ##3474223

  • @doctormo@floss.social Not sure my fail2ban solution would help enough for that. Good luck.

    Open ##3474235

  • @Niall@mastodon.nz 2026-06-28 06:21

    @doctormo@floss.social that sucks. Have a good sleep, don't let it consume you.

    Open ##3474238

  • @RussSharek@mastodon.art 2026-06-28 06:30

    @doctormo@floss.social Bah. :( Boosting in hopes of summoning some helpful nerds.

    Open ##3474239

  • @dbat@mastodon.gamedev.place 2026-06-28 06:48

    @doctormo@floss.social It's not Inkscrape, you brainless ai bros.

    Open ##3474241

  • @doctormo@floss.social Be sure to look this over. It might be related to your issue. https://lgbtqia.space/@alice/116825829843438277

    Open ##3474243

  • @doctormo@floss.social That's just devastating. Screw AI, period.

    Open ##3474245

  • @amos235@mastodon.social 2026-06-28 08:23

    @doctormo@floss.social courage

    Open ##3474246

  • @voltagex@aus.social 2026-06-28 08:25

    @doctormo@floss.social Happy to help, timezones permitting. Can help with Anubis.

    Open ##3474247

  • @jaseg@chaos.social 2026-06-28 08:26

    @doctormo@floss.social take your time and have a chill sunday! This sort of thing can wait until next week. The world can do a sunday without inkscape.org

    Open ##3474248

  • @Movie2468@mastodon.social 2026-06-28 08:29

    @doctormo@floss.social Cloudflare has some built in ai tools. Relatively easy to switch on protections and AFAIK, the ai part is free. Turn on under attack mode to push more verifications to not activity.

    Open ##3474249

  • Anubis is a solid choice though. There's also crowdsec and openappsec, all of which is surreal to even have, but their rate limiting working well once set up.

    Open ##3474253

  • @Gilou@mastodon.social 2026-06-28 08:41

    @doctormo@floss.social what a mess, fuck them.

    Open ##3474254

  • @FaithfullJohn@mastodon.scot 2026-06-28 09:01

    @doctormo@floss.social Thanks for your efforts! 🙏

    Open ##3474255

  • @diemkay@hachyderm.io 2026-06-28 09:10

    @doctormo@floss.social cc @algernon@come-from.mad-scientist.club 👀

    Open ##3474256

  • @Dragon@toast.dragon2611.net 2026-06-28 09:10

    @doctormo@floss.social there's probably plenty of people on here that could assist setting it up if needed. I've not tried anubis myself yet as I couldn't think of anywhere it would be useful to me. That said a quick look at the docs suggests it's similar to other applications where you forward traffic through it before hitting the backend application so I'm fairly confident I could get it working if I needed to.

    Open ##3474260

  • @monkee@other.li 2026-06-28 09:19

    @doctormo@floss.social God i hate these fucking AI Bots. They try to destroy everything. Take care and all the time you need.

    Open ##3474272

  • @jfbucas@mastodon.dias.ie 2026-06-28 09:20

    @doctormo@floss.social Yes, we had similar problems in the recent past. Ended up adding PoW and automated IP-block. They broke the internet. https://mastodon.dias.ie/@jfbucas/116794445872235349

    Open ##3474273

  • @nimro@hachyderm.io 2026-06-28 09:28

    @doctormo@floss.social ugh that sucks, I’m sorry! If you want some backup I’m happy to help with setting up Anubis, cloudflare, or anything else - email’s on my site linked in my profile, or we could use signal or whatever suits

    Open ##3474274

  • @rickyx@fosstodon.org 2026-06-28 10:03

    @doctormo@floss.social an easy high level mitigation is: https://perishablepress.com/ultimate-ai-block-list/ and it is regularly updated. Custom fail2ban rules and whitelist can also help.

    Open ##3474275

  • @cartocalypse@norden.social 2026-06-28 10:08

    @doctormo@floss.social It's just a website. No one will not be able to use Inkscape if it is down and even if, your health comes first.

    Open ##3474277

  • @doctormo@floss.social That's why I say I hate ai for sure

    Open ##3474278

  • @drfootleg@fosstodon.org 2026-06-28 10:16

    @doctormo@floss.social Inkscape can be installed from the Windows Store if you’re on that OS, so still available to people who have not already got it.

    Open ##3474279

  • @quentin_ld@mastodon.social 2026-06-28 11:08

    @doctormo@floss.social sad to read that :blobugh:

    Open ##3474281

  • @nokke@mstdn.social 2026-06-28 11:12

    @doctormo@floss.social a technique I use which is simple and effective, but not sure if scales to your size. Just fail2ban and a honeypot of 404s. Create an page somewhere only a scraper will find. Have that page link to a bunch of missing (404) local URLs. Don't make it obvious. Configure fail2ban to read the access log for excessive 404s within a short period of time and the AI bot will block itself. Ensure fail2ban has scaling block times configured (bantime.increment = true). Trap (404|444|403|400).

    Open ##3474282