The Day Anubis Saved Our Websites from a DDoS Attack

Re:The Day Anubis Saved Our Websites from a DDoS Attack by xena on Thursday May 01, 2025 @08:29PM (#43864923)

I'd be happy to talk about it if it existed, I'm still working out the details. But the basic idea is to take advantage of the fact that Anubis is a very popular project from what I've seen with logs that server admin have submitted the same IP blocks and the like hit instances of Anubis so some kind of IP reputation thing would work for this.

I am also working on some noJS checks, but I want to test them with paid customers in order to let a thousand flowers bloom.

[ Parent | on HN ]

Re:The Day Anubis Saved Our Websites from a DDoS Attack by ketzo on Thursday May 01, 2025 @09:45PM (#43865331)

Cool. Good luck on both that and Anubis generally — seems like you’ve found something that’s both a meaningful benefit to the common good AND could maybe make a buncha money, or at least enough to pay for development, which is awesome.

[ Parent | on HN ]

Re:The Day Anubis Saved Our Websites from a DDoS Attack by xena on Thursday May 01, 2025 @10:04PM (#43865436)

Thanks! There's a lot of really hard problems to solve and most of them hinge around trust. I usually default into solving trust by making things open, but security software needs a bit of cloak and dagger by necessity. I'll find a balance I'm sure, but it's an annoying thing to balance.

[ Parent | on HN ]

Re:The Day Anubis Saved Our Websites from a DDoS Attack by pabs3 on Friday May 02, 2025 @02:26AM (#43866747)

That sounds a bit like what crowdsec does for SSH.

https://github.com/crowdsecurity/crowdsec

[ Parent | on HN ]