How We Stopped a Tencent-Driven DDoS in Its Tracks

One of our customers has been on the receiving end of a sustained DDoS attack this week. Not from a sophisticated exploit or a criminal botnet, but from aggressive scraping by Tencent’s crawler operating under AS132203.

The attack was generating roughly 20 times the normal number of requests, and it was relentless. In practical terms, that kind of traffic hammers server resources, drives up hosting costs, and can take a perfectly healthy site to its knees.

Continue reading “How We Stopped a Tencent-Driven DDoS in Its Tracks”

Block referrer spam from the SEMalt botnet

We are trialling the following solution for blocking what is fast becoming a scourge of the web; SEMalt referrer spam.
It’s been added to the .htaccess file on one of our personal sites, and we’ll see how it does there before implementing these measures on the rest of the sites we manage. Update to follow.

UPDATE: While blocking at the server IS working, there is much more to blocking this type of spam which is detailed here and here.