#bpspam source analysis and proposed solutions
https://ingo.lantschner.name/post/2026-09-18_mailrelay-mastodon/
https://ingo.lantschner.name/post/2026-09-18_mailrelay-mastodon/
Mastodon als Mailrelay: nicht Opfer, sondern Waffe
496 Bestätigungsmails an fremde Adressen: wie mein Mastodon-Server zum Werkzeug eines Cyberkriminellen wurde.
ingo.lantschner.name
September 19, 2026 at 11:18 AM
#bpspam source analysis and proposed solutions
https://ingo.lantschner.name/post/2026-09-18_mailrelay-mastodon/
https://ingo.lantschner.name/post/2026-09-18_mailrelay-mastodon/
⚠️ #sw_isac_advisory
Services continue to report a wave of automated account creation using the naming pattern "bp" followed by a series of random alphanumerics, eg "bpc7463204e397374e" or "bpde9af0166700f555".
To date almost all accounts are created […]
[Original post on mastodon.iftas.org]
Services continue to report a wave of automated account creation using the naming pattern "bp" followed by a series of random alphanumerics, eg "bpc7463204e397374e" or "bpde9af0166700f555".
To date almost all accounts are created […]
[Original post on mastodon.iftas.org]
September 9, 2026 at 12:15 PM
⚠️ #sw_isac_advisory
Services continue to report a wave of automated account creation using the naming pattern "bp" followed by a series of random alphanumerics, eg "bpc7463204e397374e" or "bpde9af0166700f555".
To date almost all accounts are created […]
[Original post on mastodon.iftas.org]
Services continue to report a wave of automated account creation using the naming pattern "bp" followed by a series of random alphanumerics, eg "bpc7463204e397374e" or "bpde9af0166700f555".
To date almost all accounts are created […]
[Original post on mastodon.iftas.org]
I believe #bpspam is trying to get all remaining instances with open registrations blocked by gmail.com just by generating tons of annoying confirmation requests sent to real gmail.com mailboxes.
Blocking any bp substring without chance for approval is silly, but it is the only mitigation that […]
Blocking any bp substring without chance for approval is silly, but it is the only mitigation that […]
Original post on f.cz
f.cz
September 17, 2026 at 3:47 PM
I believe #bpspam is trying to get all remaining instances with open registrations blocked by gmail.com just by generating tons of annoying confirmation requests sent to real gmail.com mailboxes.
Blocking any bp substring without chance for approval is silly, but it is the only mitigation that […]
Blocking any bp substring without chance for approval is silly, but it is the only mitigation that […]
so far no new registration #spam since 2 days. With an additional #fail2ban filter and 24h block everything calmed down quite nice.
#mastoadmin #bpspam
#mastoadmin #bpspam
September 13, 2026 at 6:18 AM
so far no new registration #spam since 2 days. With an additional #fail2ban filter and 24h block everything calmed down quite nice.
#mastoadmin #bpspam
#mastoadmin #bpspam
Interested in trying to understand #bpspam fake account attack on Mastodon? If you are affected and see some IP addresses registered in Japan trying to create fake bp... accounts, try to traceroute them and reply with network names of first few hops.
But you can try to traceroute ven if […]
But you can try to traceroute ven if […]
Original post on f.cz
f.cz
September 13, 2026 at 9:04 AM
Interested in trying to understand #bpspam fake account attack on Mastodon? If you are affected and see some IP addresses registered in Japan trying to create fake bp... accounts, try to traceroute them and reply with network names of first few hops.
But you can try to traceroute ven if […]
But you can try to traceroute ven if […]
September 12, 2026 at 4:14 PM
https://about.iftas.org/2026/09/11/boom-protocol-spam/ will re-post useful tips, tricks, guidance to combat the #bpspam wave impacting many service providers.
#boomprotocol #boomprotocolprobe #spam #fediadmin #mastoadmin #peertubeadmin #fedimods #mastomods
#boomprotocol #boomprotocolprobe #spam #fediadmin #mastoadmin #peertubeadmin #fedimods #mastomods
about.iftas.org
September 11, 2026 at 4:29 PM
https://about.iftas.org/2026/09/11/boom-protocol-spam/ will re-post useful tips, tricks, guidance to combat the #bpspam wave impacting many service providers.
#boomprotocol #boomprotocolprobe #spam #fediadmin #mastoadmin #peertubeadmin #fedimods #mastomods
#boomprotocol #boomprotocolprobe #spam #fediadmin #mastoadmin #peertubeadmin #fedimods #mastomods
Mastodon and forks allow banning the use of certain usernames at /admin/username_blocks – this will stop emails going out as the username cannot be chosen, but it will stop any and all usernames (including valid requests) containing “bp” – this should be considered a temporary measure.
#bpspam
#bpspam
September 12, 2026 at 4:59 PM
Mastodon and forks allow banning the use of certain usernames at /admin/username_blocks – this will stop emails going out as the username cannot be chosen, but it will stop any and all usernames (including valid requests) containing “bp” – this should be considered a temporary measure.
#bpspam
#bpspam
Hmm, blokowanie #bpspam po domenach e-mail przestaje działać odkąd wykorzystują icloud.com czy proton.me albo gmail.com
Jak sobie radzicie? Jakieś pomysły poza wyszukiwaniem przez "bp%"?
Są jakieś pomysły na filtrowanie po klasach/adresach ip?
#askfedi #feditipspl #fedipomoc #fediadminpl
Jak sobie radzicie? Jakieś pomysły poza wyszukiwaniem przez "bp%"?
Są jakieś pomysły na filtrowanie po klasach/adresach ip?
#askfedi #feditipspl #fedipomoc #fediadminpl
September 11, 2026 at 5:07 PM
Hmm, blokowanie #bpspam po domenach e-mail przestaje działać odkąd wykorzystują icloud.com czy proton.me albo gmail.com
Jak sobie radzicie? Jakieś pomysły poza wyszukiwaniem przez "bp%"?
Są jakieś pomysły na filtrowanie po klasach/adresach ip?
#askfedi #feditipspl #fedipomoc #fediadminpl
Jak sobie radzicie? Jakieś pomysły poza wyszukiwaniem przez "bp%"?
Są jakieś pomysły na filtrowanie po klasach/adresach ip?
#askfedi #feditipspl #fedipomoc #fediadminpl
❗ Spam-konta na #mastodonie #bpspam
Jeśli chcesz szybko zaznaczyć w adminie wszystkie konta zaczynające się od bp (by je zawiesić), wpisz w "Nazwa użytkownika":
bp%
Warto też w formatce wyżej zaznaczyć w "Moderacja" tylko aktywne, by zobaczyć nowo […]
[Original post on mastodon.com.pl]
Jeśli chcesz szybko zaznaczyć w adminie wszystkie konta zaczynające się od bp (by je zawiesić), wpisz w "Nazwa użytkownika":
bp%
Warto też w formatce wyżej zaznaczyć w "Moderacja" tylko aktywne, by zobaczyć nowo […]
[Original post on mastodon.com.pl]
September 11, 2026 at 4:48 PM
❗ Spam-konta na #mastodonie #bpspam
Jeśli chcesz szybko zaznaczyć w adminie wszystkie konta zaczynające się od bp (by je zawiesić), wpisz w "Nazwa użytkownika":
bp%
Warto też w formatce wyżej zaznaczyć w "Moderacja" tylko aktywne, by zobaczyć nowo […]
[Original post on mastodon.com.pl]
Jeśli chcesz szybko zaznaczyć w adminie wszystkie konta zaczynające się od bp (by je zawiesić), wpisz w "Nazwa użytkownika":
bp%
Warto też w formatce wyżej zaznaczyć w "Moderacja" tylko aktywne, by zobaczyć nowo […]
[Original post on mastodon.com.pl]
❗️ Spam accounts on #Mastodon #bpspam
If you want to quickly select all accounts beginning with ‘bp’ in the admin panel (to suspend them), enter the following in the ‘Username’ field:
bp%
It’s also worth selecting ‘Active only’ under ‘Moderation’ in the form above to view newly registered […]
If you want to quickly select all accounts beginning with ‘bp’ in the admin panel (to suspend them), enter the following in the ‘Username’ field:
bp%
It’s also worth selecting ‘Active only’ under ‘Moderation’ in the form above to view newly registered […]
Original post on mastodon.com.pl
mastodon.com.pl
September 11, 2026 at 4:51 PM
❗️ Spam accounts on #Mastodon #bpspam
If you want to quickly select all accounts beginning with ‘bp’ in the admin panel (to suspend them), enter the following in the ‘Username’ field:
bp%
It’s also worth selecting ‘Active only’ under ‘Moderation’ in the form above to view newly registered […]
If you want to quickly select all accounts beginning with ‘bp’ in the admin panel (to suspend them), enter the following in the ‘Username’ field:
bp%
It’s also worth selecting ‘Active only’ under ‘Moderation’ in the form above to view newly registered […]
