Monero.town getting DDoSed
youtu.be
On 2024-07-02 at about 6:00 pm UTC the small monero.town lemmy instance started going down over and over again. Turns out, it has been DDoSed via tor exit no...

For the last couple of days we were offline due to a DDoS attack originating from Tor.

We are now behind cloudflare (💀) but at least we are online.

We might switch to a different CDN in the future.

  • prancing389
    4·
    4 months ago

    I’m not a fan of Cloudflare either, but I will say the site is way faster updating than before the attack.

  • HardenedSteel
    4·
    4 months ago

    can we have onion link without cloudflare but with PoW defense enabled?

  • shortwavesurferEnglish
    4·
    4 months ago

    Ick, cloudflare. Hopefully we can find a better one that is more alligned with our values

  • BlakeEnglish
    2·
    4 months ago

    thanks based admin

    lol, just days after this post about coralling rebels onto cloudflare: https://monero.town/post/3622853/5036178

    is there a wider attempt at stymying monero’s grassroots ecosystem?

    if so it seems to be mid-tier, not state-level. and it has been piecemeal, an exchange here and there, and the flood attack last month.

    but the use of tor exploits is above the average schmo and as @gogr8 says someone was comitted. we must be doing something right!

    • adminOPMA
      4·
      4 months ago

      wider attempt

      For sure. Trocador, monerocom & haveno have also been hit. No idea why they would attack this tiny lemmy instance but I’ve learned a lot so I guess I should be grateful.

  • monerodice.proB
    1·
    4 months ago

    From the youtube you attached I see you are using nginx. Maybe fail2ban with Nginx’s Limit Req Module could help?

    Need to configure nginx to limit the number of requests for IP addresses. Nginx will log info about banned IP into error log. fail2ban will parse nginx error log and ban offending IP addresses. easyengine.io/tutorials/nginx/fail2ban

    I hate cloudflare too…

  • jet@hackertalks.comEnglish
    1·
    4 months ago

    Kudos for getting back online.

    How can you work on a desktop that’s animated moving in the background? That would drive me crazy

    • adminOPMA
      2·
      4 months ago

      Oh I just put that there for the video 😆

    • adminOPMA
      41·
      4 months ago

      It’s still pretty broken on mobile and federation doesn’t work but it is a start :)

      No reason to lose hope, I started this for ideological reasons and I won’t just stop now because of a DDoS.

      • gogr8
        41·
        4 months ago

        Someone went well out of their way to meticulously plan and then devote resources towards disrupting this for many days. I honestly can’t think of any better evidence in support of the necessity of having this community.