@ymnbkt 我的镜像站蜜汁打不了字!好奇怪哦,先用活吧忍忍
tencent is scraping fedi posts
yeah okay no
PSA for all fedi admins; block "QQDownload" as a user agent
(edit: this wont work for everything, see my replies for ip ranges)
its specifically scraping statuses from accounts with pre-scraped account IDs, meaning they know what they're downloading
i have no idea what its about, one site says that its a p2p download manager, and another says its related to QQ, an instant messenger service from tencent
i have a feeling it might be an extension of their state surveillance system
edit: grepping logs further, it doesn't seem like all of them have "QQDownload" in it, so also block "TencentTraveler" from accessing apis unauthenticated
edit 2: urgh... it seems that the user agents are not consistent, and it seems that a geoip database also wont really help, since some of them come from singapore, from alibaba cloud...
edit 3: im just gonna wack-a-mole it, ive set up something for our server to see these requests and for me to manually add IP ranges to ban
大人!这是老色的活吧魂器!可以不用关注!