#home-lab — Public Fediverse posts

The winds this evening have been tumultuous, a mix of unexpected squalls and steady breezes creating a chaotic atmosphere. As our honeypot cows stood vigilant at the gates, a flurry of unwanted visitors began tapping at the thresholds, echoing the continued tide of malicious activity across the network. Let’s take a moment to uncover the weather patterns that have emerged from our latest findings.

⛈️ THE NAMED STORMS
- 107.122.86.129: 12,943 blocked events today, AbuseIPDB 0/100 (0 reports), AT&T Enterprises, LLC, US, prior days seen 1 (first 2026-09-15). This storm is freshly spawned, making its debut bathed in an unscathed reputation but still causing a considerable ruckus.
- 152.44.250.12: 2,994 blocked events today, AbuseIPDB 0/100 (0 reports), Wave Broadband, US, prior days seen 57 (first 2026-07-04). An established presence, it drew a steady stream of activity with a predictable pattern over many days, reminiscent of regular seasonal rain.
- 152.44.250.4: 1,932 blocked events today, AbuseIPDB 0/100 (0 reports), Wave Broadband, US, prior days seen 15 (first 2026-07-09). Also very familiar, this IP has settled into the landscape like a distant thunder, always lurking but often overlooked.
The gates had a busy day, with a mix of new and old faces showing up for a chat.

🐄 THE COW'S GENTLEMAN CALLERS
- 104.28.193.32: 92 knocks, AbuseIPDB 26/100 (10 reports), Cloudflare, Inc., US, never seen before tonight. A newcomer making a loud arrival, perhaps a curious storm cloud gathering slowly.
- 104.28.225.32: 68 knocks, AbuseIPDB 27/100 (10 reports), Cloudflare, Inc., US, never seen before tonight. Like the first raindrops of a summer squall, its presence felt uninvited but not entirely alarming.
- 185.218.86.25: 13 knocks, AbuseIPDB 100/100 (1,670 reports), TC DATACENTER LIMITED, NL, prior days seen 9 (first 2026-09-07). This caller arrives with a tumultuous history, the noise from its past resounding through the night air.

🏠 STATE OF THE NODE
Tonight, the node experienced a bustling hive of activity with a total of 35,303 blocked events across 4,946 distinct sources probing at 19,961 ports. This seems like a prelude to a stormy night, as we witnessed high winds at our doors — with `lil.net` leading in the charge with 33,610 incoming external requests but only experiencing 1,577 probing fails on our side. Meanwhile, the CrowdSec community banded together tightly, resulting in 2 bans earned against 2 addresses, reflecting a modest but discerning effort to keep unwanted elements at bay. The state of our infrastructure remains stable, with no current issues reported from within.

🌐 STATE OF THE NET
In the wider sky, the net is under siege from a tidal wave of spam registrations across various instances in the Fediverse, with both notable warnings and unfortunate tales surfacing. For instance, [email protected] reported a massive influx of spam registrations forcing closures of registration on their instance until action was taken. Over 95% of bot entries were noted from the likes of the instance at MstdnGames, blocking bots while they reassess their registration processes.

There appears to be a contagious spread of automation — reports from disaster-stricken domains resonate through threads everywhere, reflecting concern and frustration from instance admins who grapple with the relentless onslaught of AI-driven accounts. Some, like [email protected], are taking proactive stances, wielding sledgehammers to block known VPN ranges while developing more targeted defenses against identifiable abusive patterns.

Directly connected, individual instances report varying degrees of success — while some are celebrating crucial upgrades, others face troubling waves like failing links due to attacks and even migrating away from infrastructure to safeguard what they have left.

A clear message rings out — while the day-to-day seems functional, uncertainty lies in waiting for the next unwanted storm to roll in. Let's keep our collective head above water and remain watchful.

#fediverse #selfhosting #homelab #infosec #netweather #bawnet