Jan Wildeboer 😷:krulorange:
@jwildeboer@social.wildeboer.net  ·  activity timestamp 7 days ago

"Thanks" to AI crawler bots, "resident IP Proxy services" (they are botnets, period) and SEO (Search Engine Optimisation) The Open Web we wanted has become more like the digital equivalent of an abusive relationship.

So I am un-optimising my web presence. Static pages only, Pure content, no optimisations, keeping crawlers at bay. Digital self-defence to get back to what we, the people, wanted the internet to be. The internet of people.

1/5
Jan Wildeboer 😷:krulorange:
@jwildeboer@social.wildeboer.net  ·  activity timestamp 7 days ago

No cloudflare, I rely on the DDoS protection from my hosting providers. Everything on my "own" machines (well, technically Virtual Private Servers for 5-10€/month with a bare bone Red Hat Enterprise Linux install, administration via ssh access). Should one of my machines get under attack by excessive traffic and go offline, so be it. It'll be back after a short while. I can live with that. And so should you, my dear friends. Call it SlowHosting 😊 More relaxed, more forgiving.

2/5
Jan Wildeboer 😷:krulorange:
@jwildeboer@social.wildeboer.net  ·  activity timestamp 7 days ago

And at home I have my Cute Homelab that is, well, at home and not publicly accessible. That's where I can experiment and play. I try to document all that stuff in a rather ad-hoc manner on my blog [1] and my public gist collection [2]. I hope that sharing all of that inspires you to experiment yourself! To make your own mistakes and have your own success moments. And share your experiences. Trust me, it's totally worth it.

4/5

[1] https://jan.wildeboer.net
[2] https://codeberg.org/jwildeboer/gists
Jan Wildeboer 😷:krulorange:
@jwildeboer@social.wildeboer.net  ·  activity timestamp 7 days ago

Addendum: I use https://crowdsec.net on my public servers since 2 years now and it serves me well. It collects data from many volunteers out there analyses them and feeds my firewall. I also run a few shell scripts to add local decisions. While this is all happily humming in the background, the number of entries tells you that even a small server like mine is under continuous attack.

Excerpt from my crowdsec statistics on one of my public servers. It blocks thousands of IP addresses and ranges and updates itself continuously. | Reason │ Origin │ Action │ Count │ │ crowdsecurity/http-cve-2021-42013 │ crowdsec │ ban │ 1 │ │ SMTP bruteforce │ cscli │ ban │ 56 │ │ http:exploit │ CAPI │ ban │ 10904 │ │ http:scan │ CAPI │ ban │ 3087 │ │ crowdsecurity/CVE-2017-9841 │ crowdsec │ ban │ 1 │ │ crowdsecurity/http-bad-user-agent │ crowdsec │ ban │ 3 │ │ crowdsecurity/http-cve-2021-41773 │ crowdsec │ ban │ 1 │ │ AI Crawler │ cscli │ ban │ 665 │ │ firehol_botscout_7d │ lists │ ban │ 2379 │ │ generic:scan │ CAPI │ ban │ 1302 │ │ pop3/imap:bruteforce │ CAPI │ ban │ 637 │ │ smtp:spam │ CAPI │ ban │ 231 │ │ SASL bruteforce │ cscli │ ban │ 513 │ │ firehol_greensnow │ lists │ ban │ 6599 │ │ http:crawl │ CAPI │ ban │ 19 │ │ crowdsecurity/http-probing │ crowdsec │ ban │ 1 │ │ Spam │ cscli │ ban │ 7 │
Excerpt from my crowdsec statistics on one of my public servers. It blocks thousands of IP addresses and ranges and updates itself continuously. | Reason │ Origin │ Action │ Count │ │ crowdsecurity/http-cve-2021-42013 │ crowdsec │ ban │ 1 │ │ SMTP bruteforce │ cscli │ ban │ 56 │ │ http:exploit │ CAPI │ ban │ 10904 │ │ http:scan │ CAPI │ ban │ 3087 │ │ crowdsecurity/CVE-2017-9841 │ crowdsec │ ban │ 1 │ │ crowdsecurity/http-bad-user-agent │ crowdsec │ ban │ 3 │ │ crowdsecurity/http-cve-2021-41773 │ crowdsec │ ban │ 1 │ │ AI Crawler │ cscli │ ban │ 665 │ │ firehol_botscout_7d │ lists │ ban │ 2379 │ │ generic:scan │ CAPI │ ban │ 1302 │ │ pop3/imap:bruteforce │ CAPI │ ban │ 637 │ │ smtp:spam │ CAPI │ ban │ 231 │ │ SASL bruteforce │ cscli │ ban │ 513 │ │ firehol_greensnow │ lists │ ban │ 6599 │ │ http:crawl │ CAPI │ ban │ 19 │ │ crowdsecurity/http-probing │ crowdsec │ ban │ 1 │ │ Spam │ cscli │ ban │ 7 │
Excerpt from my crowdsec statistics on one of my public servers. It blocks thousands of IP addresses and ranges and updates itself continuously. | Reason │ Origin │ Action │ Count │ │ crowdsecurity/http-cve-2021-42013 │ crowdsec │ ban │ 1 │ │ SMTP bruteforce │ cscli │ ban │ 56 │ │ http:exploit │ CAPI │ ban │ 10904 │ │ http:scan │ CAPI │ ban │ 3087 │ │ crowdsecurity/CVE-2017-9841 │ crowdsec │ ban │ 1 │ │ crowdsecurity/http-bad-user-agent │ crowdsec │ ban │ 3 │ │ crowdsecurity/http-cve-2021-41773 │ crowdsec │ ban │ 1 │ │ AI Crawler │ cscli │ ban │ 665 │ │ firehol_botscout_7d │ lists │ ban │ 2379 │ │ generic:scan │ CAPI │ ban │ 1302 │ │ pop3/imap:bruteforce │ CAPI │ ban │ 637 │ │ smtp:spam │ CAPI │ ban │ 231 │ │ SASL bruteforce │ cscli │ ban │ 513 │ │ firehol_greensnow │ lists │ ban │ 6599 │ │ http:crawl │ CAPI │ ban │ 19 │ │ crowdsecurity/http-probing │ crowdsec │ ban │ 1 │ │ Spam │ cscli │ ban │ 7 │