Login
You're viewing the assemblag.es public feed.
  • Neil Craigtdp_org@mastodon.social
    Oct 22, 2026, 7:44 PM

    Dang, turns out that banhammer on a single IP in France was 75% of the traffic from the entire country.

    1 IP @ 75%.

    It was 100% malicious, spoofing user-agent and sec-ch-ua* - i know this because it had the same JA4 fingerprint and an even spread of requests per user-agent over the same areas of our website.

    If you're gonna be *that* much of prick, at least be a *bit* less obvious.

    💬 2🔄 0⭐ 0

Replies

  • cait, probably overthinkingc@cpf.sh
    Oct 22, 2026, 7:46 PM
    @tdp_org hey if I decide I want to invite 75% of the French population over to my house to curl the BBC website with a spoofed user agent that is my god given right 😤😤😤
    💬 1🔄 0⭐ 0
  • Neil Craigtdp_org@mastodon.social
    Oct 22, 2026, 7:51 PM

    @c That'd be fine, we love cURL and the gang ❤️ - as long as it's beneficial usage 👍🏻

    23 million BS requests per day on the other hand - not the best use of license fees or carbon output.

    cc @bagder @icing @ pals for props & rightful recognition 🫡

    💬 0🔄 0⭐ 0
  • markwalkermarkwalker@fosstodon.org
    Oct 23, 2026, 10:50 PM

    @tdp_org Had a terrible attempt to spoof user-agent today. It claimed to be both Chrome and Safari!

    💬 0🔄 0⭐ 0