I've enabled the access log for a moment and could identify a single IP Address from a VPS hoster in Sweden that opened *a lot* of connections, maybe crawling the instance. I've blocked the IP address for now and will investigate the problem after a shower 🚿
#mastoadmin
@hieronymus @leah did you fix it?