@chris9x @phnt Oh, requests with curl useragent went to /relay/inbox/ (note the slash) and didn't have valid-looking signature in the header, which made all of them return 400. The other useragent was sending them to /relay/inbox, all with the same header with valid structure. Might've been the work of two, albeit from the same IP range.