this post was submitted on 17 Jun 2026
140 points (100.0% liked)
Fediverse
42502 readers
430 users here now
A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, Mbin, etc).
If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!
Rules
- Posts must be on topic.
- Be respectful of others.
- Cite the sources used for graphs and other statistics.
- Follow the general Lemmy.world rules.
Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration)
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I block huge data-center cidr ranges. Whole cidr yes. Not a single ip. But tens of thousands, most like more in the millions of IPs by now.
Then I also have rate limits installed. So it block users when a threshold is reached in Angie/Nginx via fail2ban.
Finally, depending on your software. I know that Forgejo and gitea can block access or limit access for non-registered/logged-out users. So visitors can only view the repos and some files. But maybe not scrape all the git commit hashes etc.
The latter I would call server hardening.
But it first starts with decent logging and displaying the data. Easy to drill down or filter. This is needed to identify the source /sources of the bad actors.
These are the basics. Even before I consider cloudflare or Anubis.
Interesting on forgejo I'll investigate as that's the container I use.
Cloudflare was easy enough as I already use cloudflare tunnels to expose some internet facing services I run. But reducing the reliance on providers is something that I want to achieve.