Mastodon Announces DDoS Strike On Its Lead Server

A distributed denial-of-service attack struck Mastodon’s flagship server on Monday, making it occasionally unavailable, according to the social networking company.

A large portion of the website was unavailable, showing a full-screen outage warning or error messages.

The creators of the official mastodon used by the decentralized social networking program mestodon.social instance stated that it was looking into the cyberattack in a status update on Monday at roughly 7 a.m. ET while other servers (instances) across the “Fediverse” remained operational.

Mastodon reported that it has put in place a “countermeasure against the DDoS attack, and the site is accessible” by 9:05 a.m. ET. However, the business had cautioned that while the attack is still going on, there might be some volatility. 

Days after Bluesky, another decentralized social network, fixed most of its days-long outages after a protracted DDoS campaign, Mastodon is the subject of a cyberattack. The DDoS attack is still ongoing as of Bluesky’s April 17 update; however, their service has been reliable since April 16 at 9 PM PDT. The current stability was verified by today’s update.

When the members of the press from TechCrunch contacted Mastodon representatives, they did not immediately provide an explanation for the cyberattack.

The goal of distributed denial-of-service (DDoS) assaults is to take down an app or website by flooding its servers with excessive volumes of malicious web traffic. DDoS attacks can cause disruptions for users, although they do not include data theft. 

Over time, DDoS attacks have grown considerably more potent. The largest DDoS attack to date, with a peak speed of 29.7 terabits per second, the equivalent of filling thousands of hard drives with data every minute, was mitigated last year, according to network security firm Cloudflare.

Attacks on decentralized social networking systems can result in outages and instability, however not all users are brought offline. For example, in the case of Bluesky, users who transferred their accounts to other service providers, such as Blacksky, which use the same protocol and communicate with Bluesky, were unaffected.

In a similar vein, only the bigger server (mastodon.social) has been the target of the Mastodon attack thus far; the numerous smaller instances that comprise the entire Mastodon social network have not. 

As of Monday afternoon, Mastodon’s official status page reports that systems are operational while monitoring for further attacks, though no group has claimed responsibility and company representatives have not commented on the origin of the traffic.