**Tinker** @tinker · 2018-05-23T12:42:52Z

Tinker @tinker

You know Mastodon is getting popular when people spend the time to register multitudes of spam bots. Here’s hoping @Gargron and others build in tools to help admins control these at scale.

May 23, 2018, 12:42 · Amaroq · 8 · 16

**ALL-ROUTERS.MCAST.NET** @dewb@not.phrack.fyi · May 23, 2018, 12:46

**ALL-ROUTERS.MCAST.NET** @dewb@not.phrack.fyi · May 23, 2018, 12:46

@tinker @Gargron
Oh thats easy!

:) iptables, and/or nginx with tcp-wrapper support.

**orangesec333** @orangesec_0@freespeech.firedragonstudios.com · May 23, 2018, 13:01

**orangesec333** @orangesec_0@freespeech.firedragonstudios.com · May 23, 2018, 13:01

@tinker @Gargron at a level not having a valid email address is good for activists, but it gets abused by spam bots...

**Eugen** @Gargron@mastodon.social · May 23, 2018, 13:05

**Eugen** @Gargron@mastodon.social · May 23, 2018, 13:05

@orangesec_0 @tinker E-mails *are* confirmed. The bots just confirm them because either they're specially automated towards Mastodon or somebody's manually creating all that stuff

**orangesec333** @orangesec_0@freespeech.firedragonstudios.com · May 23, 2018, 13:06

**orangesec333** @orangesec_0@freespeech.firedragonstudios.com · May 23, 2018, 13:06

@Gargron @tinker On MOST instances they are confirmed. That is what I'm talking about.

**Eugen** @Gargron@mastodon.social · May 23, 2018, 13:07

**Eugen** @Gargron@mastodon.social · May 23, 2018, 13:07

@orangesec_0 @tinker No, it's built into mastodon. Can't login until e-mail is confirmed.

**orangesec333** @orangesec_0@freespeech.firedragonstudios.com · May 23, 2018, 13:10

**orangesec333** @orangesec_0@freespeech.firedragonstudios.com · May 23, 2018, 13:10

@Gargron @tinker Guess that was an update then, or the blocklist was lying. I read a blocklist that said to block a now down instance for spam.

**Jerry Bell** @jerry · May 23, 2018, 13:47

**Jerry Bell** @jerry · May 23, 2018, 13:47

@tinker @Gargron I have been seeing a lot of account registrations which is leading me to wonder if some of them are automated registrations and are an early indication of spam campaigns to come...

**KMJ** @kmj@mastodon.ctseuro.com · May 23, 2018, 13:49

**KMJ** @kmj@mastodon.ctseuro.com · May 23, 2018, 13:49

@jerry @tinker @Gargron some people posted that there are spammer accounts growing on their instances. Looks like it gets popular.

**Ted Gould** @ted@gould.cx · May 23, 2018, 15:05

**Ted Gould** @ted@gould.cx · May 23, 2018, 15:05

@tinker now I'm feeling left out, I don't have a spam bot.