This post is just to inform everyone that the AlAdhan API has been the victim of a long running DDoS attack for the better part of 2-3 weeks. The attack largely originates from hundreds (so far) of Digital Ocean IP addresses in several different regions (Digital Ocean has been informed) but is not restricted to their IP addresses alone.
In order to mitigate the attack, rate limits have been reset (https://community.islamic.network/d/2-is-there-a-rate-limit-on-the-apis) and several IPv4 and IPv6 CIDRs have been blocked across the firewalls. If you use Digital Ocean and/or your IPs appear to have been blocked, please respond to this post and we can take it from there.
At this point it is not clear what the motive of the attacker is or when they will stop. Rest assured, the service, inshaAllah will continue to run unaffected.
I have come across other services operating from the GCC (entities based in the GCC but not necessarily servers operating in the GCC) that have come under attack from Digital Ocean IPs from the same data centres in the last 30 days. If anyone has experienced such an attack or has more details, please do reach out.
Update (December 5): The original DDoS ended, but shortly thereafter (on December 2) we started seeing an attack from thousands of IPs across Indonesia, Bangladesh, Morocco and Pakistan. Several providers in these countries appear to have had their machines compromised by a botnet. As a result of this almost 300,000 IPs have been blocked from these countries. Please reach out if you have been blocked and ensure that your servers are up to date and not compromised.
Update (December 21): To give everyone an idea of the scale of the attack (and to let the ISPs know they should probably do something about their security), here just a list of the ISPs across cities where the attack has originated: https://docs.google.com/document/d/1epwI9oaMtM8gBheJIBMMeB_Z2a7ZaiEPYXq40LfZZlc.
Thank you!
