Not entirely clear to me what is going on, but we've seen a large influx in traffic from oversea today. This has lead to high CPU and performance issues.
I've put in place a block to what seems to be the source of the traffic, but its not perfect and may cause other issues. If you see/hear of any please let me know here.
13 Comments
lodion@aussie.zone · 13 pts · 1y
For some context, CPU usage jumped when the traffic started... and dropped after the block was applied:
Eyekaytee@aussie.zone · 6 pts · 1y
What sort of block if I can ask? AI block or blocking Russia?
lodion@aussie.zone · 15 pts · 1y
The unusual traffic all appeared to be coming from one location on the internet, with the same user agent string. Any traffic from that network will now receive a captcha from Cloudflare. I'm not aware of any lemmy instances hosted there, but will keep an eye on things.
dumblederp@aussie.zone · 8 pts · 1y
I'm all for captcha use to limit bots and this kind of stuff, which effectively became a DDoS.
imoldgreeeg@aussie.zone · 6 pts · 1y
Definitely noticed someyuwas up today. Not just here but lags across a few different websites - my speeds were fine so I wondered if it was a broader DNS or DDoS attacks
lodion@aussie.zone · 6 pts · 1y
And for anyone curious... blue line is traffic from a country we don't normally see much traffic from. The unusual spike, then drop when I blocked the specific sources:
Nath@aussie.zone · 2 pts · 1y
It's probably Nicole. She's mad that she can't spam us any longer.
lodion@aussie.zone · 5 pts · 1y
The traffic stopped a few hours back, from all IPs at once. Definitely seems to have been some sort of deliberate action.
Aussiemandeus@aussie.zone · 5 pts · 1y
An odd place to attack or try spam, but I guess if you have unlimited resources you would hit anywhere
dumblederp@aussie.zone · 4 pts · 1y
Could be a trial attack.
Gorgritch_umie_killa@aussie.zone · 5 pts · 1y
I's thinking something was up today!
hitmyspot@aussie.zone · 4 pts · 1y
I noticed something was up. I'd seen some meta posts about other instances updating so I wondered if it was a bug or federation issue but obviously not.
sunshine@lemm.ee · 2 pts · 1y
Definitely some concerning stuff!