Post Av5dqTFRceY5ebC2aG by donncha@mastodon.ie
 (DIR) More posts by donncha@mastodon.ie
 (DIR) Post #Av5dqLIhAgOb0MeWXY by donncha@mastodon.ie
       2025-06-11T21:35:19Z
       
       0 likes, 1 repeats
       
       Just blocked Alibaba and Google Cloud from my server for trying to grab too much stuff. It's already paid off. :)<RequireAll>  Require all granted  # Block Alibaba subnets  Require not ip 47.244.0.0/15  Require not ip 47.236.0.0/14....  # Block Google Cloud subnets  Require not ip 34.4.5.0/24  Require not ip 34.4.64.0/18  Require not ip 34.6.0.0/15....</RequireAll>Do a whois of the IP abusing your site to get their networks.15912 requests today.
       
 (DIR) Post #Av5dqTF5dyGVdV1l20 by donncha@mastodon.ie
       2025-06-11T21:36:20Z
       
       0 likes, 0 repeats
       
       And TIL about the Apache 2.4 format for those rules. I have to admit, I still prefer "Deny from".
       
 (DIR) Post #Av5dqTFRceY5ebC2aG by donncha@mastodon.ie
       2025-06-11T21:44:51Z
       
       0 likes, 0 repeats
       
       3 more Alibaba networks added to the block list.
       
 (DIR) Post #Av5dqTL7HZ5NwBqZQO by donncha@mastodon.ie
       2025-06-11T21:50:14Z
       
       0 likes, 0 repeats
       
       Tempted to add this. Lucky it's my personal blogs, not something "important" to the world:Require not ip 47.0.0.0/8
       
 (DIR) Post #Av5dqTMtAyVI1gfzBg by donncha@mastodon.ie
       2025-06-11T21:38:02Z
       
       0 likes, 0 repeats
       
       The Alibaba attack is particularly bad because it uses lots of different IPs, but they're all banned now.Edit: 16660 banned requests, but there were 96336 requests from the 47.X.X.X network today. That's just ridiculous.
       
 (DIR) Post #Av5dqb1ugqTjmwvLbU by donncha@mastodon.ie
       2025-06-11T22:03:50Z
       
       0 likes, 0 repeats
       
       This does explain why my cache directory is 181MB of compressed html pages. Despite having a cache TTL of only 30 minutes.I think this has been going on for much longer than I thought.