14:43:03 <AK> Woo
17:40:26 <imer> JAA/arkiver: we seem to be ddosing huahinnews.net, not sure if the site is legit or not https://transfer.archivete.am/OtxgG/2023-10-15_17-40-14.txt
17:41:40 <imer> queue is exploding as well
17:42:06 <imer> (although not sure if thats relate)
17:43:13 <imer> queue loop with comically long url: https://transfer.archivete.am/zQIzJ/2023-10-15_17-42-36.txt
18:18:03 <JAA> Hmm yeah, those huahinnews.net URLs look a bit suspicious.
18:31:04 <imer>  it calmed down pretty quick so I assumed someone did something (also queue went down again rapidly)
18:35:17 <JAA> Doesn't look like anything was done about it.
18:35:30 <JAA> Maybe just a burst, or it'll be back later with a vengeance.
18:49:00 <imer> weird.
19:31:47 <arkiver> just a burst
19:31:51 <arkiver> but indeed, i'll check this out
19:31:55 <arkiver> there are a few others like this too
19:57:08 <imer> 25 req/s here to it again
20:01:17 <imer> very bursty
20:06:19 <arkiver> also no not legit, spam crap
20:21:10 <arkiver> taking out some loops
20:22:24 <arkiver> and will just filters out the huahinnews.net one
20:22:41 <arkiver> i can't match it easily with loops we've seen before, so it may be a new one or it's just this one site
20:23:00 <arkiver> if it's just this one site it's better to filter out, if others turn up like this, we'll ignore them by URL patterns
20:33:30 <arkiver> imer: fix is in
20:35:25 <imer> nice, thanks :)
23:03:11 <imer> queue seems to be growing again, only pattern I can see is "manga" sites though
23:04:46 <imer> ah. disq.us short links redirecting to "manga" sites
23:05:06 <imer> for example https://transfer.archivete.am/oeUCE/2023-10-15_23-04-52.txt
23:07:09 <imer> "some" sitemaps got picked up too https://transfer.archivete.am/g4Brm/webnovel.site.log
23:09:05 <imer> arkiver: queue is up by 4.5M in the last hour so might need attention, sorry for another ping ^