Codeberg.org
Codeberg@social.anoxinon.de
"Nabend" (German good evening) everyone. Some new actor just popped up and is scanning Codeberg for security issues. We are identifying the IP addresses to block and should be back online in a few minutes.
2
0
1
arc) 
Martijn 🇪🇺🇳🇱
chaosmonkey@masto.ai
@Codeberg Out of curiosity: what are you guys using to detect threats like this?
3
0
0
Codeberg.org
Codeberg@social.anoxinon.de@chaosmonkey grep on access logs, mostly. It's the first time that this has had a big impact, and it seems to be due to the length of the search query and the amount of requests that Codeberg is suffering so much.
1
0
0
@chaosmonkey @Codeberg asking for a friend? 😉
1
0
0
Martijn 🇪🇺🇳🇱
chaosmonkey@masto.ai@mattesilver @Codeberg Mostly interested in different solutions people come up with for real world problems. Occupational curiosity I guess.
1
0
0
@chaosmonkey @Codeberg sure, but a security related question is always a risk of an adversary asking for help defeating the defences
1
0
0
Martijn 🇪🇺🇳🇱
chaosmonkey@masto.ai@mattesilver @Codeberg I can only half agree. Security by obscurity is not a great idea either. Anyway, its not important so if codeberg wants to remain quiet about it, that's also fine. 😊
0
0
0
They took a little leprechaun in a G-man suit and built him an apartment inside the computer case then moved him in there. Nothing gets past Paddy's radar.
0
0
0
Martijn 🇪🇺🇳🇱
chaosmonkey@masto.ai@Codeberg Thanks for the response. 😀 I am going to be running a small service and was looking around for solutions so I got curious.
1
0
0
@chaosmonkey @Codeberg if you’re running a small service you can use Cloudflare to proxy your traffic - they offer basic DDoS and AI scraping protections on the free plan
1
0
0
Codeberg.org
Codeberg@social.anoxinon.de... and they watch all your user's traffic, including passwords, in the meantime. A scary thing for us, nothing we would ever deploy.
0
0
0