Gina Häußge 🔜 #GPN22 on Nostr: Well, the analysis and mitigation is ongoing, and in the process of that I found ...
Well, the analysis and mitigation is ongoing, and in the process of that I found another ... thing. The verdict is still out on this being a case of a rampant running CI, or some weird VPN endpoint, or something evil. The traffic from the cloud IP I found was definitely organic, but still had some issues and also was too short lived per instance identifier.
Nuked everything from that source. Goodbye 100k instances 😢
Shitty week, really. And still not done with analysis and mitigation.
Published at
2024-07-02 20:28:37Event JSON
{
"id": "b128e85b414a22677304f570d81dcbcd26b79b3fb298a8ee95fac723ba1af279",
"pubkey": "6669673770cc05daca3cdbec2127d474e8179c7c95ccf709e378057e40d41c4a",
"created_at": 1719952117,
"kind": 1,
"tags": [
[
"e",
"66bc1ed51141a4804703beb768fc8f1abd13a5518135dede78c65b242222e8d6",
"",
"root"
],
[
"p",
"6669673770cc05daca3cdbec2127d474e8179c7c95ccf709e378057e40d41c4a"
],
[
"proxy",
"https://chaos.social/@foosel/112718781967202394",
"web"
],
[
"proxy",
"https://chaos.social/users/foosel/statuses/112718781967202394",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://chaos.social/users/foosel/statuses/112718781967202394",
"pink.momostr"
],
[
"expiration",
"1722622284"
]
],
"content": "Well, the analysis and mitigation is ongoing, and in the process of that I found another ... thing. The verdict is still out on this being a case of a rampant running CI, or some weird VPN endpoint, or something evil. The traffic from the cloud IP I found was definitely organic, but still had some issues and also was too short lived per instance identifier.\n\nNuked everything from that source. Goodbye 100k instances 😢\n\nShitty week, really. And still not done with analysis and mitigation.",
"sig": "76d071ed70d957f49b53b090b07f87fbe7b44f0d3bbb4fc8717b1fa82bc1bf0f948689d42100e0804791158f4cec8c7b33ed63875236a8be67e008ec8cc5461b"
}
