Nostr Web Client

There is a currently an active spam attack on Nostr that’s using kind 6 and 7s and generating around 80k spam events an hour.

Seems to mostly be targeting the Damus relay. It’s harder to filter these as rolling pubkeys with Profile meta and nip-05 - and no event content to check spam.

Really throttling and rate limiting is a good start, however we may need better methods.

Lurking Cat 2y ago

Cc #[2] , is there any similar attack in nostr.mom and nos.lol ?

Reply to this note

Please Login to reply.

Discussion

someone 2y ago

Thanks for the notice!

Not seeing anything bad on them. Mom would evade this thanks to being IP based. Lol could have been hit but nothing bad as of now.

TIL there is kind 6 😉

Lurking Cat 2y ago

Ah nice to hear that, i think more sophisticated spam like this will occur more often, especially if the goal is to disrupt relay performance. More vicious than simple annoying ads spam.

Btw, do you happen found this #[5] and #[6] currently publish event in nostr.mom or nos.lol ? I found them got auto blocked by amethyst

someone 2y ago

lol is default in Damus as far as I know. Not sure about mom.

Lurking Cat 2y ago

Those two pubkey somehow manage to go to nostr.mom

someone 2y ago

Got some of those spams now in nos.lol

He uses this as content of kind 7: ⚠️

Lurking Cat 2y ago

Well, seems you need rate-limit in nos.lol too 😅

someone 2y ago

He also spams the spam reports (1984) 🤦

Lurking Cat 2y ago

Spammer report spam 😂

Blake 2y ago

Yep. It was mostly kind 6/7 as flood spam. But also most pubkeys had a single kind 0 too.