Sounds pretty suspicious to me.

      • ChappIO@waveform.socialMEnglish
        3·
        1 year ago

        Thanks for letting me know, I have blocked the bot in our firewall for now and will delete the fake account shortly

          • ChappIO@waveform.socialMEnglish
            2·
            1 year ago

            Yeah, idk what it is. It seems like a weak attack 🤷🏼‍♂️ one account every few seconds. Nothing that would topple any server except a raspberry pi.

            I can see it’s an amateurishly written script, making it easy to pick out in the firewall. Oh well

              • ChappIO@waveform.socialMEnglish
                3·
                1 year ago

                Yeah that’s unrelated. I moved the server to a new ip address to isolate it from my personal projects. It took a while for these changes to propagate.

                • daguito81@waveform.socialEnglish
                  1·
                  1 year ago

                  Good to hear, saw the cloudflare error most of the day today and was worried because several small instances were being hit. Would it make sense to enable captcha and email verification to the signup process so you don’t get hit by more bots?

                  Seems like some actors would like to slowly cultivate bot accounts on smaller instances that fly under the radard of bigger ones

                  • ChappIO@waveform.socialMEnglish
                    1·
                    1 year ago

                    We’ve got some headroom on this instance. I’m currently using about 7% of the available resources.

                    Though tuning lemmy isn’t easy. But I’m working on it. (I want federation to be faster because posting content takes a while now).

                • Ebauche@waveform.socialEnglish
                  1·
                  1 year ago

                  Let me know if you ever need help with server admin stuff. I’m not an expert, but did web dev for 15 years and still comfortable enough on the old Linux CLI.