38
Issues 23/3/25 (aussie.zone)
submitted 2 months ago by [email protected] to c/[email protected]

Not entirely clear to me what is going on, but we've seen a large influx in traffic from oversea today. This has lead to high CPU and performance issues.

I've put in place a block to what seems to be the source of the traffic, but its not perfect and may cause other issues. If you see/hear of any please let me know here.

top 13 comments
sorted by: hot top new old
[-] [email protected] 13 points 2 months ago

For some context, CPU usage jumped when the traffic started... and dropped after the block was applied:

[-] [email protected] 6 points 2 months ago* (last edited 2 months ago)

What sort of block if I can ask? blocking AI bots or blocking Russian bots?

[-] [email protected] 15 points 2 months ago

The unusual traffic all appeared to be coming from one location on the internet, with the same user agent string. Any traffic from that network will now receive a captcha from Cloudflare. I'm not aware of any lemmy instances hosted there, but will keep an eye on things.

[-] [email protected] 8 points 2 months ago

I'm all for captcha use to limit bots and this kind of stuff, which effectively became a DDoS.

[-] [email protected] 6 points 2 months ago

Definitely noticed someyuwas up today. Not just here but lags across a few different websites - my speeds were fine so I wondered if it was a broader DNS or DDoS attacks

[-] [email protected] 6 points 2 months ago

And for anyone curious... blue line is traffic from a country we don't normally see much traffic from. The unusual spike, then drop when I blocked the specific sources:

[-] [email protected] 2 points 2 months ago

It's probably Nicole. She's mad that she can't spam us any longer.

[-] [email protected] 5 points 2 months ago

An odd place to attack or try spam, but I guess if you have unlimited resources you would hit anywhere

[-] [email protected] 4 points 2 months ago

Could be a trial attack.

[-] [email protected] 5 points 2 months ago

The traffic stopped a few hours back, from all IPs at once. Definitely seems to have been some sort of deliberate action.

[-] [email protected] 5 points 2 months ago

I's thinking something was up today!

[-] [email protected] 4 points 2 months ago

I noticed something was up. I'd seen some meta posts about other instances updating so I wondered if it was a bug or federation issue but obviously not.

[-] [email protected] 2 points 2 months ago

Definitely some concerning stuff!

this post was submitted on 23 Mar 2025
38 points (97.5% liked)

Meta

670 readers
1 users here now

Discussion about the aussie.zone instance itself

founded 2 years ago
MODERATORS