The current spam wave originates at 188.8.131.52. I have confirmed with another admin that this IP seems to be stable at least for today's spam.
They have selected instances via https://instances.noct.zone in the past, so if you're listed there you might be more at risk.
You can stop it for now by adding `deny 184.108.40.206;` to the server block in your nginx config.
In case you have a GitHub account, you can upvote this PR/Issue!
@aurelia Good catch. I'm working on an automoderator; once I get it working better I'm gonna try to add an IP rule which checks the poster's IP.
Additionally, the two site IPs being used so far are 220.127.116.11 and 18.104.22.168; useful if they decide to start hopping domains.
22.214.171.124: This originates at Flokinet IS, a "bulletproof" host associated with known right-wing troll Vincent Canfield of cock.li fame. Recommend blocking their entire AS.
126.96.36.199: This is shared hosting at 1and1, I've already contacted their abuse desk.
@bclindner The Floki IP specifically originates at box.cock.li, there is no chance at that being moderated (I unfortunately know Vincent and know how he ticks)
@aurelia Same IP with the "DisneyDream" spammer.
@aurelia Looks like Eugen is finally getting around to it too, now that the crisis has forced his hand.
@KitsuneAlicia "crysis has forced his hand" is a bit of a dramatisation, I asked for it to be reprioritized and that was about it
@aurelia Well, the spambot, while not a new phenomenon, has seen quite the uptick since this asshole decided to do what he's doing, so even if "crisis" is a bit overkill, it's still pretty accurate.
@koyu AFAIK the IPs keep changing, I got reports from several different IPs without any valid pattern I could detect: https://hackers.town/@thegibson/102282949305132206
@aurelia Got another IP for you if you're interested - got a persistent spammer today from 188.8.131.52. You got anything on that IP?
Welcome to the Serenity Laboratories public Mastodon instance. This is a stable instance with high standards of curation and moderation. Please read those before registering. The short version is: No Nazis. No Fascists. No bigotry. Listen and be excellent to other people.