Anatomy of a real-time Nostr (flood) spam attack.

Reactions count seems high.. ok, which relay(s) also has a spike? Found it.

Here we can clearly see the spike in volume and identify it’s coming from a specific relay - and the volume matches too.

Ignore my dupe relay record ;)

Reply to this note

Please Login to reply.

Discussion

And we can also see reposts are higher too.. but to a lesser degree.

Detecting is easier than blocking for these Nostr kinds today.. unfortunately.

is this nos.lol?

Nope. It’s a little hard to read the selected filter: it’s the most white text - it’s nostr.fediverse.jp.

Nos.lol just has the most unique inbound events at present 🎁