adingbatponder :nixos: 👾 on Nostr: My small static site (a Reticulum mesh directory reticulum.site) has been hit since ...
My small static site (a Reticulum mesh directory reticulum.site) has been hit since mid-Oct by a strange swarm: runs of 600–3,500 residential IPs (BR/IN/TR/IQ/PH…), each making exactly ONE request (GET /, no assets, no probing) and never returning. ~8,000 IPs so far, near-zero IP reuse between runs. Not a DDoS: ~0.3 req/s peak. What is this? #infosec #askfedi (1/3)
Published at
2026-10-29 09:24:14 UTCEvent JSON
{
"id": "042ed6dfad4656192e912801dc89f8153f20fa428ddb6bc1389db8b3011f335a",
"pubkey": "62b4002513dcb7efac1dec876f9c066d7aea38e9f6651978f7c013a7dfac23f6",
"created_at": 1793265854,
"kind": 1,
"tags": [
[
"proxy",
"https://fosstodon.org/@adingbatponder/117523471058530581",
"web"
],
[
"t",
"infosec"
],
[
"t",
"askfedi"
],
[
"proxy",
"https://fosstodon.org/users/adingbatponder/statuses/117523471058530581",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://fosstodon.org/users/adingbatponder/statuses/117523471058530581",
"pink.momostr"
],
[
"-"
]
],
"content": "My small static site (a Reticulum mesh directory reticulum.site) has been hit since mid-Oct by a strange swarm: runs of 600–3,500 residential IPs (BR/IN/TR/IQ/PH…), each making exactly ONE request (GET /, no assets, no probing) and never returning. ~8,000 IPs so far, near-zero IP reuse between runs. Not a DDoS: ~0.3 req/s peak. What is this? #infosec #askfedi (1/3)",
"sig": "c04331cd0e2a61289625fb6c36e90f7b5bd3d211df0adb5b156faffc871866acad826aa4babfe52c6e6ea26646f1589484c8fbff2636dab5cf3a039ba2da6f11"
}
