Skip to main content
PPlamenu
HomeLive feedsPeopleGroupsRulesStaff
Sign in
PPlamenu
HomeLive feedsPeopleGroupsRulesStaff
Sign in
IFTAS@iftas@mastodon.iftas.org
⁨1⁩mo

Mastodon and forks allow banning the use of certain usernames at /admin/username_blocks – this will stop emails going out as the username cannot be chosen, but it will stop any and all usernames (including valid requests) containing “bp” – this should be considered a temporary measure.

#bpSpam

example rule denying bp in username — Open image attachment ⁨1⁩ of ⁨1⁩
example rule denying bp in username
1000
Open original page
BoostsQuotesFavs
Tealk@tealk@friendica.rollenspiel.monster
⁨1⁩mo

Replying to @⁨iftas@mastodon.iftas.org⁩

@iftas I’ve solved it differently now: git.rollenspiel.monster/ansibl…

Since all requests have a fairly similar user agent "Python/3.10 aiohttp/3.14.3", I have started banning it via CrowdSec.

⁨Sep⁩ ⁨12⁩, ⁨2026⁩, ⁨20:57⁩en
2000
Open original page
BoostsQuotesFavs
Chewie@chewie@mammut.gogreenit.net
⁨1⁩mo

Replying to @⁨tealk@friendica.rollenspiel.monster⁩

@tealk @iftas

Interesting.
I'm also getting the agent "aiohttp" in my logs, but not all of the IPs are also trying to register users. Maybe this is just a scanner, and the bot that tries to register may not be running from the same IPs.

0100
Open original page
BoostsQuotesFavs
Andrew :hokkaido: :famichiki:@piepants@famichiki.jp
⁨29⁩d

Replying to @⁨tealk@friendica.rollenspiel.monster⁩

@tealk @iftas Doesn't work anymore - I've got a firewall rule forcing a challenge on aiohttp, and they're getting through again.

1000
Open original page
BoostsQuotesFavs
Tealk@tealk@friendica.rollenspiel.monster
⁨29⁩d

Replying to an earlier post

Do you have the user agent for the new requests?
1000
Open original page
BoostsQuotesFavs
IFTAS@iftas@mastodon.iftas.org
⁨29⁩d

Replying to @⁨tealk@friendica.rollenspiel.monster⁩

@tealk I've seen a few reports about "Chrome 126"

0100
Open original page
BoostsQuotesFavs