| 28 Jun 2026 |
 Sandro | @hexa:lossy.network | 08:43:56 |
 Eymeric | Could it just be that the IP has a bad reputation or do the bot detection need more hints ? | 08:46:35 |
 Grimmauld (any/all) | is it bot detection or just a funny dns? | 08:46:52 |
| Grimmauld (any/all) | what happens if you dig? | 08:46:58 |
 K900 | It's bot detection | 08:47:16 |
| K900 | Specifically iocaine | 08:47:19 |
| Eymeric | I get the same ip as from france :
dig hydra.nixos.org
; <<>> DiG 9.20.23 <<>> hydra.nixos.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44837
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;hydra.nixos.org. IN A
;; ANSWER SECTION:
hydra.nixos.org. 3600 IN CNAME mimas.nixos.org.
mimas.nixos.org. 3600 IN A 157.90.104.34
;; Query time: 161 msec
;; SERVER: 1.1.1.1#53(1.1.1.1) (UDP)
;; WHEN: Sun Jun 28 15:47:27 +07 2026
;; MSG SIZE rcvd: 80
| 08:47:32 |
| K900 | I assume your AS is on a list somewhere | 08:47:47 |
| K900 | As a lot of the LLM scraperbots use residential connections now to obfuscate their behavior | 08:48:10 |
| Eymeric | hmmm ok so nothing simple to fix it other than switching to a different ip | 08:48:43 |
| K900 | https://github.com/NixOS/infra/blob/8527b8acb0c44c20c592e94eb725e1452592764a/build/hydra-proxy.nix#L50 | 08:49:14 |
| K900 | Are you on AS45899 by any chance? | 08:49:30 |
| Eymeric | yes ^^ | 08:49:45 |
| Eymeric | * yes exactly ^^ | 08:50:09 |
|  julie joined the room. | 08:50:40 |
| Eymeric | thanks for the information ❤️
i'll use a vpn then | 08:50:42 |
| Eymeric | * thanks for the informations ❤️
i'll use a vpn then | 08:50:48 |
| K900 | OK looks like iocaine doesn't give us per-AS metrics | 08:51:02 |
| K900 | hexa (signing key rotation when) can you check if we're still being hit from AS45899 by any chance? | 08:51:15 |
 hexa | AS45899 952 (907 IPs) | 10:45:33 |
| hexa | since today | 10:45:39 |
| hexa | we started banning VNPT mid december 2025 | 10:46:57 |
| hexa | so until a few weeks ago hydra wouldn't respond to you at all | 10:47:31 |
| hexa | because that was firewall based | 10:47:37 |
| Eymeric | okay np i will use another ip and it would be fine for me | 10:48:07 |
| hexa | http://github.com/nixos/infra/commit/8ef2649bc39d40d8b238cc67f57cca0ac23c2ff7 | 10:48:18 |
| hexa | we can try rolling that ban back for a while and see if it escalates again | 10:48:29 |
| Eymeric | If I'm the only one complaining, maybe it isn't worth the trouble. | 10:49:56 |
| hexa | we'll still match indvidiual clients that way, just not sure how great that works and willing to find out | 10:51:27 |
| hexa | Eymeric applied | 10:55:38 |
