Phantasm on Nostr: Haelwenn /элвэн/ :triskell: Emily! :Blobhaj_Witch_Broom: There seem to be ...
Haelwenn /элвэн/ :triskell: (nprofile…m3qg) Emily! :Blobhaj_Witch_Broom: (nprofile…enrd) There seem to be currently two active scraping attempts from China. This is one of them. A scrape of repos using git's bundles and tarballs. The other one is less "smart" about it and it instead just hits the server with requests for every file in every repo and with every revision of that file.
Previously they've been using Huawei Cloud with African, Singaporean and Hongkong IPs and now they use Alibaba's US ranges.
Also worth noting that Claude does the exact stupid way of scraping instead of cloning the repo which doesn't create tarballs and thus leaves almost no trace of that activity.
Published at
2025-03-02 23:38:26Event JSON
{
"id": "38b65ff69bc149ae8b7acd88cc41e4d90e7aee87537c665d37ce5d08df4de5c8",
"pubkey": "c8d5a41d8a4341c35896ac790dfede47417fe5e70c7c7fb63f6a5ba0d08359f9",
"created_at": 1740958706,
"kind": 1,
"tags": [
[
"p",
"24389949b53d16958eae22ba78a4040316903c933a9e8f9d9fd5f10688fc62af",
"wss://relay.mostr.pub"
],
[
"p",
"9a21f9871d661e5c97f1ab72fd3cf71eb56584674938dc5984c4b8a8cf7f24f7",
"wss://relay.mostr.pub"
],
[
"e",
"8c07134b84d818d7e569cbb2aef01d209c4862d950dc1ac864e30db091fd6db2",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://fluffytail.org/objects/45f9c2a3-cf6c-4abd-8490-50aeeae7dd84",
"activitypub"
]
],
"content": "nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqysufjjd485tftr4wy2a83fqyqvtfq0yn820gl8vl6hcsdz8uv2hs28m3qg nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqngslnpcavc09e9l34de0608hr66ktpr8fyudckvycju23nmlynmsl3enrd There seem to be currently two active scraping attempts from China. This is one of them. A scrape of repos using git's bundles and tarballs. The other one is less \"smart\" about it and it instead just hits the server with requests for every file in every repo and with every revision of that file.\n\nPreviously they've been using Huawei Cloud with African, Singaporean and Hongkong IPs and now they use Alibaba's US ranges. \n\nAlso worth noting that Claude does the exact stupid way of scraping instead of cloning the repo which doesn't create tarballs and thus leaves almost no trace of that activity.",
"sig": "8d942e4954a7ddaecdefeeb158d8a9e498375d9474ec7f8de311d556f4b1ccff0ccacccf143ca14303614f8899d924fd4736aea238637ffe6fa13a91d4fef2d0"
}
