4 ms·
Collect as much data as possible on them and use it to shadow ban them, or outright ban them. Blacklist their IPs, devices, etc. You can even blacklist their co
by yellow_lead 4y ago
Collect as much data as possible on them and use it to shadow ban them, or outright ban them. Blacklist their IPs, devices, etc. You can even blacklist their country temporarily if possible. For DDOS, etc you could look at putting Cloudflare in front of your services. And make sure you rate limit everything.
>We have received massive entries in our database from multiple attackers.
Review all your validation code. If this shouldn't be possible, but your code let it through, it's something you should be validating but are not.
- qocial 4y agoOur validations are not the issue, they are correctly working for forms. We had no limit set per user. We have just started throttling user's request based on their activity. We are still working on it and performing all app related updates. Outside app, we are not sure, what else can be done. We are already using PRO membership of cloudflare, but I don't think cloudflare are working correctly. requests in cloudflare is not matching with the request in nginx reverse proxy log.