Submitted 3 weeks ago by lodion@aussie.zone to meta@aussie.zone
Not entirely clear to me what is going on, but we’ve seen a large influx in traffic from oversea today. This has lead to high CPU and performance issues.
I’ve put in place a block to what seems to be the source of the traffic, but its not perfect and may cause other issues. If you see/hear of any please let me know here.
Definitely noticed someyuwas up today. Not just here but lags across a few different websites - my speeds were fine so I wondered if it was a broader DNS or DDoS attacks
And for anyone curious… blue line is traffic from a country we don’t normally see much traffic from. The unusual spike, then drop when I blocked the specific sources:
It’s probably Nicole. She’s mad that she can’t spam us any longer.
An odd place to attack or try spam, but I guess if you have unlimited resources you would hit anywhere
Could be a trial attack.
I’s thinking something was up today!
The traffic stopped a few hours back, from all IPs at once. Definitely seems to have been some sort of deliberate action.
I noticed something was up. I’d seen some meta posts about other instances updating so I wondered if it was a bug or federation issue but obviously not.
Definitely some concerning stuff!
lodion@aussie.zone 3 weeks ago
For some context, CPU usage jumped when the traffic started… and dropped after the block was applied:
Image
Eyekaytee@aussie.zone 3 weeks ago
What sort of block if I can ask? AI block or blocking Russia?
lodion@aussie.zone 3 weeks ago
The unusual traffic all appeared to be coming from one location on the internet, with the same user agent string. Any traffic from that network will now receive a captcha from Cloudflare. I’m not aware of any lemmy instances hosted there, but will keep an eye on things.