@prologic This shi_ is as fun as it is frustrating! 😆 the bot is poking at me from a different ASN now, Alibaba's.

1. Short term solution: I've geo-locked my Timeline instance since I'm the only one using it (and I only do so for reading twts when I'm away from terminal).
2. Long term: I took a look at your Caddy WAF but couldn't figure things out on my own; until then, I'll be poking at Caddy-Defender, maybe throw in a Crowdsec for lols... #FUN

@doesnm.p.psf.lt yes, that's what I did while testing things out on locally but Timeline kept freaking out on me. I'm still RTFMing trying to wrap my head around the rewrites and such.

@lyse @prologic 😆 There was something weird going on with my #Timeline instance, the text input box was visible even though I was logged out and I was able to twt from it ... It has to do with cache because it wouldn't disappear unless I whip my website's cache from the browser.

Poke @sorenpeter and @eapl.me I have no Idea how to reproduce this.

@doesnmppsflt It looks like it... Although they shouldn't be empty since Timeline took care of sending those. I believe I have an idea as to why that happened, but will have to test before filing an issue.

@doesnm.p.psf.lt I don't know if you have already noticed, but your Twtxt/Webmention script outputs Timestamps from the future 🤔 I wonder if Timeline's does the same ...

hmm... apparently the invalid twts are the latest ones I'd posted from Timeline but highly probably because I'd tried to restore them manually, after unintentionally overriding my twtxt file with one that was out of date 🤦

Saved, I hope that didn't anyone's timeline... 😅