Mastodon developers confirmed that their flagship server experienced a severe distributed denial-of-service (DDoS) attack on Monday morning. The influx of malicious web traffic overwhelmed the primary instance, leaving many users unable to load the site or interact with their feeds.
While administrators warned that minor instability might persist, primary access was fully restored.
The targeted assault focused on “mastodon.social,” the largest and most recognizable entry point for the platform. During the peak of the Mastodon DDoS attack, visitors encountered full-screen outage warnings and error messages.
“ Users with accounts on other Mastodon (or any other Fediverse) servers were completely unaffected, and in most cases, the outage would have been invisible to them – they have been able to access the network, read and posts as usual, ” said Andy Piper, Mastodon’s head of communications, cited by TechCrunch.
Security monitoring systems detected millions of junk requests flooding the infrastructure, consistent with DDoS attacks, according to Piper. However, he warned that “ some ongoing instability is a possibility .”
Platform engineers initiated an immediate cybersecurity response upon detecting the abnormal traffic spikes around 7:00 a.m. ET. By 9:05 a.m. ET, the technical team successfully deployed active countermeasures to filter the junk traffic and stabilize the network.
A few days ago, Europol announced that Operation PowerOFF dismantled over 50 domains and unmasked 75,000 criminals associated with DDoS attacks, and the Aisuru, KimWolf, JackSkid, and Mossad botnets were dismantled in late March.
Earlier this month, a Rostelecom DDoS attack triggered a major network outage in Russia.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
