Bots from Alibaba Cloud taking my sites down (opens in new tab)
For much of the day Sydney time, the VM hosting this site and a few for my family have been smashed with traffic with spoofed headers, but from IP ranges associated with the Alibaba Cloud, specifically these: 47.79.200.0/24 47.79.206.0/24 47.79.207.0/24 They issued a sufficient number of requests to overwhelm my php_fpm pool, resulting in sites sometimes returning a 502 Bad Gateway. Bad gateway, bad. I’ve blocked the entire damned ranges for now and bumped up my server specs, which seems to h...
Read the original article