this post was submitted on 23 Mar 2025
1 points (100.0% liked)

Meta

656 readers
1 users here now

Discussion about the aussie.zone instance itself

founded 2 years ago
MODERATORS
 

Not entirely clear to me what is going on, but we've seen a large influx in traffic from oversea today. This has lead to high CPU and performance issues.

I've put in place a block to what seems to be the source of the traffic, but its not perfect and may cause other issues. If you see/hear of any please let me know here.

top 13 comments
sorted by: hot top controversial new old
[–] [email protected] 0 points 1 week ago (1 children)

And for anyone curious... blue line is traffic from a country we don't normally see much traffic from. The unusual spike, then drop when I blocked the specific sources:

[–] [email protected] 0 points 1 week ago

It's probably Nicole. She's mad that she can't spam us any longer.

[–] [email protected] 0 points 1 week ago

The traffic stopped a few hours back, from all IPs at once. Definitely seems to have been some sort of deliberate action.

[–] [email protected] 0 points 1 week ago

Definitely some concerning stuff!

[–] [email protected] 0 points 1 week ago

I noticed something was up. I'd seen some meta posts about other instances updating so I wondered if it was a bug or federation issue but obviously not.

[–] [email protected] 0 points 1 week ago

Definitely noticed someyuwas up today. Not just here but lags across a few different websites - my speeds were fine so I wondered if it was a broader DNS or DDoS attacks

[–] [email protected] 0 points 1 week ago (1 children)

An odd place to attack or try spam, but I guess if you have unlimited resources you would hit anywhere

[–] [email protected] 0 points 1 week ago

Could be a trial attack.

[–] [email protected] 0 points 1 week ago (1 children)

For some context, CPU usage jumped when the traffic started... and dropped after the block was applied:

[–] [email protected] 0 points 1 week ago* (last edited 1 week ago) (1 children)

What sort of block if I can ask? blocking AI bots or blocking Russian bots?

[–] [email protected] 0 points 1 week ago (1 children)

The unusual traffic all appeared to be coming from one location on the internet, with the same user agent string. Any traffic from that network will now receive a captcha from Cloudflare. I'm not aware of any lemmy instances hosted there, but will keep an eye on things.

[–] [email protected] 0 points 1 week ago

I'm all for captcha use to limit bots and this kind of stuff, which effectively became a DDoS.

[–] [email protected] 0 points 1 week ago

I's thinking something was up today!