the writeups about the conditions leading to this are all pretty interesting:
blog.xkeeper.net/uncategorized/tcrf-has-been-getting-ddosed/
blog.xkeeper.net/the-cutting-room-floor/self-hosting-and-junk-traffic/
the latest:
blog.xkeeper.net/the-cutting-room-floor/tcrf-2026-ddos-postmortem/