Notices by Patrick Figel 🐣 (pfigel@mastodon.at)

On the bright side, I guess we now have 20G of free disk space for future database growth.

Here's a slightly revised CIDR list that seems to cover all the IPs used by the spammers so far:

https://gist.github.com/patf/1ae99fdd15718483fc15b1e8c8f25fe2

(some CIDRs are redundant because they're from different sources)

Hopefully that'll do for now.

#mastoadmin

Definitely looks like a spam campaign. So far all accounts signed up from the same ISP. Here's a script you can paste in your rails console to find all users from IP ranges belonging to that ISP (assuming I didn't miss any):

https://gist.githubusercontent.com/patf/fc2e65007562d403181c33b418fff045/raw/1d66d75c7f00ef8f73eae5a83a99514cd04c525f/naughty_list.rb

To get to the rails console, run this in /home/mastodon/live as the mastodon user:

RAILS_ENV=production bundle exec rails c

You might also want to temporarily ban those IP ranges if the sign-ups don't stop. I did.

#mastoadmin