#mastoadmins followup re: account registration spam: looks like all the spam account emails point to the same MX server, mxsrv.mailasrvs.pw. if you add this domain to the email blacklist, it should prevent any email whose domain has an MX record pointing there.
tl;dr: add mxsrv.mailasrvs.pw to your email blacklist, it should prevent most of these spam registrations
Looks like I have no new spam signups since this night, guess it worked. Reposting this link for you non-nightowls out here, and if you want a list of IPs, just ask away.
Followup from my last few toots, I've written a full tutorial, #Mastodon instance admins might want to do this.
I retooted in my last few retoots how to do ban these IPs on #Mastodon, but you might want to check for false positives first, who knows.
hey #mastoadmins, i've been seeing a lot of spam registrations over on scalie.business. M.O. is a username that seems like it's a bunch of randomly selected syllables strung together, a display name that's Firstname Lastname (seems to be from real people on fedi in some cases), and an email that's <username> @ one of these domains: https://pastebin.com/vq2MbUCh
they haven't done anything yet other than confirm their accounts, including follow anyone other than the default follows, but watch out in case they do
Here's a slightly revised CIDR list that seems to cover all the IPs used by the spammers so far:
(some CIDRs are redundant because they're from different sources)
Hopefully that'll do for now.
Definitely looks like a spam campaign. So far all accounts signed up from the same ISP. Here's a script you can paste in your rails console to find all users from IP ranges belonging to that ISP (assuming I didn't miss any):
To get to the rails console, run this in /home/mastodon/live as the mastodon user:
RAILS_ENV=production bundle exec rails c
You might also want to temporarily ban those IP ranges if the sign-ups don't stop. I did.
I finally remade my blog based on this Write Freely thing and I'm proud of it, go read it
(CW: hot takes on Facebook, ads and everything)
Sysadmin, programmer, writer, artist, musician, friendly instance admin. I run a bunch of stuff. Check out my novel, Zarmina.
This instance is mainly for the graphic calculator community, but is open to programmers, artists and related fields.
This is an instance for those who used to put games and hack on their TI-83+ instead of actually doing their math homework on it back in high school. Those who picked up programming because it's fun. Those who will put their favourite programming languages to creative uses and maybe make up new ones. You are encouraged to show your projects off on this instance and show other users of the fediverse what you're able of.
Mostly everything is allowed, but just keep it friendly, okay? No abuse, use common sense. We're just a bunch of nerds here. All hail the mighty walrus.
If you don't have enough of 500 characters, feel free to visit our sister site at CodeWalrus and join the forums and the Discord server.