Anatomy of a real-time Nostr (flood) spam attack.

Reactions count seems high.. ok, which relay(s) also has a spike? Found it.

Here we can clearly see the spike in volume and identify it’s coming from a specific relay - and the volume matches too.

Ignore my dupe relay record ;)